Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa
File: 3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa (raw, json)
Hash identifier: 2fyPppLaUL+k00cj/dYiK74YtcG68PNcvCyn68NSMWI=
Subject key identifier: 3B:0C:8A:63:2F:29:21:B2:97:AA:47:91:05:71:DA:9D:04:98:55:24
Certificate issuer: /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial: 010D0C9F4328584900215715FB44EF8607350100
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 19331
IP address blocks: 149.149.0.0/16 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:57:15:fb:44:ef:86:07:35:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=4294a7d8-45c2-4333-8d98-783ed082742c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:48:d0:50:83:f3:3d:fa:cc:bf:30:f1:64:
66:1a:5e:12:8b:1e:65:f2:6c:2d:97:88:7f:33:56:
3d:33:cb:26:5a:34:84:23:8d:d2:a1:62:3e:1a:98:
6b:30:9c:d3:30:9d:48:1c:19:6d:ae:9f:55:04:28:
7c:b0:99:24:e1:01:f8:1a:f7:3b:7b:21:3f:fc:44:
5d:d9:81:d2:8f:54:64:c3:c2:7e:80:e9:08:af:3e:
fb:45:23:0b:56:95:8e:7c:28:72:3f:5e:11:1f:65:
02:87:9d:52:33:42:79:48:f5:77:36:19:39:cf:e5:
d0:82:a4:d0:d7:0e:31:58:24:6b:4f:07:90:72:62:
c8:84:b7:1a:0f:95:d4:68:e7:40:2d:c3:67:2a:8e:
25:06:da:c1:c0:a6:3e:d1:6f:cd:31:11:0d:be:a4:
c9:58:74:f2:3c:1c:8d:29:66:e4:cc:b3:f5:1e:ac:
16:42:c8:84:c3:ea:d1:69:c1:ab:4d:e9:29:b7:15:
ea:9a:5c:94:90:7f:48:0a:87:d8:56:bf:8e:55:55:
df:b0:d1:0b:dc:72:84:14:07:fa:39:69:1d:df:52:
e9:c7:65:93:c1:21:3d:c1:dd:50:c5:5e:21:5e:53:
cd:78:8a:91:96:44:98:c8:10:6d:d1:c5:bb:8e:60:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:8A:63:2F:29:21:B2:97:AA:47:91:05:71:DA:9D:04:98:55:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
X509v3 Authority Key Identifier:
keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:9a:32:e6:9d:00:a9:37:46:73:f8:a4:50:48:53:98:99:77:
7a:12:79:7d:ff:92:86:c9:13:6e:f1:75:92:47:4e:bb:54:13:
d7:33:e8:a1:86:ec:5f:0d:ae:91:0e:2e:d1:92:10:52:84:29:
f6:3e:6a:cc:45:8f:65:a1:e1:87:0e:48:3c:90:9a:5e:f0:5a:
df:e8:5e:11:d5:ac:48:e0:b8:e1:b6:44:7f:0e:42:2e:e0:50:
2e:1d:ae:58:97:5d:f4:2f:77:d8:d4:f3:48:85:a9:98:21:a7:
e1:1c:9c:3e:44:e8:32:3b:bc:66:cd:5f:58:c6:c9:0a:e4:90:
66:3a:99:05:5f:ff:b7:bf:88:13:4d:5d:eb:b5:d4:77:c2:a9:
71:a1:f3:d6:7e:48:0f:fa:a8:88:ab:c5:26:2a:5a:a4:c2:cc:
69:aa:0d:99:8f:db:51:1e:74:dd:af:34:bf:e3:19:3c:fe:f4:
5b:f5:93:f6:96:15:b5:6f:36:16:7c:78:86:de:2b:b7:06:8a:
9f:26:1f:72:5f:bc:20:69:52:31:6e:96:cb:1d:04:cb:46:3e:
11:56:ff:cc:a9:1f:f4:18:e3:9b:0a:ef:27:8e:b7:36:cf:7a:
c0:54:fc:2e:5c:dd:1a:08:78:15:78:92:b8:35:f5:89:54:a2:
63:c0:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:50 2025 by rpki-client on console.sobornost.net