Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa
File: 7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa (raw, json)
Hash identifier: NgxlJClUTnTqzm0ESZd/2lyO7KDVGQRt9Z0RHv8RSyE=
Subject key identifier: 26:A8:50:F8:AF:38:99:31:06:95:4D:DD:C4:F2:6C:86:8E:61:6D:8F
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F432858481F65385D6F4439046C958900
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 0
IP address blocks: 149.112.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:38:5d:6f:44:39:04:6c:95:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=45933828-873e-4444-9b7e-8fc983ccc212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:20:c4:f4:7c:88:cf:b7:d4:82:a3:c3:6b:
7d:91:76:87:1c:9c:41:38:79:4d:7d:a8:ce:36:75:
21:0a:25:48:f7:a9:41:68:c4:f3:57:20:40:38:6b:
df:19:2e:64:64:5a:d6:e8:a8:51:8c:09:88:e2:0d:
6d:7a:fe:8b:23:ec:fd:a8:09:c6:4c:12:b2:41:c9:
6f:0c:a5:e7:2b:c8:2d:ce:be:4f:ec:9f:a2:94:a1:
9b:c5:ff:5a:a6:4d:25:d6:eb:ce:a1:03:cf:78:89:
45:3d:ec:6e:7f:e7:7f:39:6a:ad:92:d3:08:9a:a4:
f3:ee:44:33:2f:97:cf:9f:1b:ed:74:9c:e3:03:25:
5a:c5:ac:ea:2d:87:86:a6:a5:3c:dd:ea:e7:f1:93:
6e:64:4f:32:b0:56:b2:85:bc:99:38:e3:3d:7b:b1:
fa:07:43:a8:5a:fb:2c:d5:11:be:cd:cb:f4:cb:1d:
c5:ca:82:60:0f:85:36:87:bc:c1:12:f1:21:6c:76:
db:2d:59:fc:e3:51:63:f2:80:d4:69:4d:77:a5:d6:
7a:71:c5:b2:98:7a:0d:c9:c8:9c:47:29:18:4e:29:
43:d1:1e:34:7e:92:ef:5b:70:29:75:64:d6:d7:ce:
91:d7:8a:5d:21:a0:8d:a8:6d:52:bb:e9:3e:d6:34:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A8:50:F8:AF:38:99:31:06:95:4D:DD:C4:F2:6C:86:8E:61:6D:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:89:61:c4:2a:8f:ea:17:af:24:bc:f8:9f:f5:c4:82:85:a5:
6d:79:cf:a5:e8:8a:46:36:d4:65:14:ff:0e:cf:9a:96:61:02:
6d:f8:88:e4:32:c7:c9:4a:4f:48:82:90:2a:1c:1f:da:6c:11:
e2:75:4b:b6:7e:72:3e:15:1f:f6:04:5a:b7:90:5e:cd:61:ce:
7b:bf:0f:33:5c:d4:a1:0d:f0:85:bc:a2:0e:ce:80:a3:47:aa:
fc:4f:cb:30:b2:aa:fa:31:21:96:92:4e:7e:84:eb:35:14:48:
f5:2d:53:af:08:80:75:95:8d:ca:50:ec:13:67:f5:f1:43:b2:
db:74:1b:47:c3:90:94:4e:f1:6f:1d:0a:13:1b:df:2d:77:b1:
cb:9a:e4:4a:13:8e:a0:c3:ad:fc:4c:d4:1d:e4:90:8c:0f:30:
b4:db:d6:8f:81:f1:6b:a3:e8:94:97:33:dc:55:a5:5e:7a:a7:
a5:b6:98:e2:f7:ac:ec:e6:b9:87:c1:99:9d:23:6f:78:12:43:
42:bc:ef:87:59:d7:77:a2:3c:70:80:7d:38:8e:e4:98:d0:14:
29:40:15:22:18:9f:2b:db:09:76:ce:bf:47:9e:7e:90:3d:7c:
38:ad:de:0a:e1:67:f2:00:10:1a:43:4d:a0:17:a4:0b:19:b8:
ce:c5:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:38:22 2025 by rpki-client