Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa
File: c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa (raw, json)
Hash identifier: gouaeSaxYvOWsDfrKh1VHQxEPw/HdREazZSmFqJbYNw=
Subject key identifier: CB:36:77:E8:10:0D:19:B3:96:CA:1A:D8:CE:6F:4F:14:35:89:B7:48
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F4328584886B0809FA88B3A506A9F4D80
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 11377
IP address blocks: 149.72.2.0/23 maxlen: 23
149.72.96.0/23 maxlen: 23
149.72.98.0/23 maxlen: 23
167.89.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:80:9f:a8:8b:3a:50:6a:9f:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=abece0dc-37bd-441f-b112-df8201cdcde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:0b:e3:3f:f5:dc:cd:ef:6d:79:02:29:ca:
f8:10:00:2a:98:76:da:4d:ff:27:30:57:e9:21:2c:
30:0c:d5:1c:70:51:8c:c2:a4:e7:32:23:15:92:22:
cf:91:98:b1:0b:f7:0d:fa:a2:a6:7b:77:22:36:b0:
cf:a2:00:00:82:c2:4d:2c:2b:6b:88:d2:cf:ff:62:
3a:43:9a:bb:95:c9:f0:83:11:0f:6d:f9:95:d5:75:
d8:8d:a9:d4:08:a4:a5:35:95:0f:ec:f0:11:78:3c:
7f:41:cd:b5:e0:63:98:0c:f8:2c:e3:e6:02:36:7d:
2a:ae:39:1c:7f:81:3e:a5:74:c6:a7:bc:7f:ca:9e:
b4:b2:7c:9d:dd:28:dd:f2:2e:46:d7:94:91:d8:76:
56:90:53:0b:d6:3f:c8:77:bc:58:1f:c0:1a:2e:82:
18:e4:c2:13:30:6b:f7:4e:99:30:82:21:04:d8:01:
c0:e9:f8:85:3f:6e:66:6b:4f:19:4e:ff:30:1c:76:
8f:0c:9c:9a:57:73:bb:b4:8d:4c:3a:f6:b1:2c:3c:
4e:73:de:7f:fd:7c:26:93:a1:e2:9b:e2:79:de:99:
ae:fc:cd:d5:42:26:1a:8b:4b:de:6e:38:aa:10:dc:
4b:23:42:ab:3e:8b:c6:ff:1c:29:7d:ac:92:64:a7:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:77:E8:10:0D:19:B3:96:CA:1A:D8:CE:6F:4F:14:35:89:B7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.2.0/23
149.72.96.0/22
167.89.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:58:64:81:10:cb:6c:43:d8:b2:66:18:da:d8:46:c6:de:ea:
07:5c:c8:1f:e0:9b:34:0e:87:e5:f5:c7:f4:bc:b0:a1:50:38:
11:d5:c5:38:81:c2:6a:de:56:91:44:70:cc:72:d2:fb:14:b3:
d8:2c:ce:2a:25:fb:ed:5a:81:b5:70:16:bf:b9:73:10:e8:df:
33:05:8c:b7:ac:7b:93:49:75:52:24:5d:37:39:73:15:2b:68:
3a:0d:ad:a8:6c:43:ec:d7:38:25:49:db:35:a5:29:7c:06:46:
9e:1e:e1:15:09:81:4e:5b:bd:90:18:76:36:ce:82:ce:5b:3d:
a8:4d:43:a6:4a:4f:11:cb:91:f6:57:d4:a3:cc:2c:02:10:09:
f0:db:f8:d2:c5:0d:fd:35:92:7b:0f:e3:fb:12:8b:4b:fd:ba:
a0:50:41:da:18:61:04:cb:35:b7:35:70:d2:4b:26:f8:f6:5b:
f2:8f:d0:05:4f:6d:71:85:71:9f:b8:28:4d:e7:fc:81:a2:fb:
b1:9f:ee:6d:42:c5:f6:00:6f:aa:ae:59:1c:83:aa:76:07:4a:
0a:58:ee:be:a9:17:85:76:73:ef:e8:53:d5:b6:dd:36:d9:f6:
e3:53:d6:a3:e5:75:ed:5e:c5:a7:78:25:9a:bc:e4:eb:67:03:
90:f7:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:21 2025 by rpki-client