Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/8fc8d0bc-3323-34e9-8040-60716980266e.roa
File: 8fc8d0bc-3323-34e9-8040-60716980266e.roa (raw, json)
Hash identifier: dQXh/1PBp7ZWejnseoECdfufeP5dqtBMa8vPpNtFbCc=
Subject key identifier: 7D:EC:D1:BD:06:E1:7D:92:2F:31:CB:0C:20:64:F5:60:BC:40:8F:DD
Certificate issuer: /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial: 010D0C9F4328584908817384F7CF1AAEC8FA7300
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/8fc8d0bc-3323-34e9-8040-60716980266e.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 14397
IP address blocks: 65.49.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:73:84:f7:cf:1a:ae:c8:fa:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=5dbc6d1f-a0b0-4188-995e-6e5c02829ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:58:f4:49:63:c4:71:45:d5:57:c2:1d:8e:
b7:37:5c:b2:c9:f7:0b:51:9a:4a:02:c8:d2:4d:09:
31:dc:9c:cd:67:75:59:47:d7:42:a1:ef:59:ad:39:
45:44:df:5d:27:ad:80:12:3c:26:c2:1d:79:da:db:
40:66:b5:6d:a4:cc:c0:d3:75:b8:f6:47:56:36:8a:
a6:ee:64:ee:74:e2:41:03:e4:fd:44:7f:47:88:61:
34:0b:6e:1d:8d:00:1d:2e:62:1e:4d:72:ba:e7:8f:
f5:88:2f:7b:ed:63:7a:c3:1c:62:d1:40:2e:41:6c:
6d:21:4e:e2:b7:fa:2e:51:6a:14:d9:7c:d7:34:2a:
3f:ea:ba:86:5c:64:f9:73:07:e5:bc:2c:9b:f1:04:
83:15:48:83:49:83:cc:c8:85:53:5b:1c:e9:ed:ae:
9a:ba:b1:37:35:ec:c5:e4:69:34:36:1b:58:24:ae:
f8:09:dc:3d:30:2d:18:1a:6c:bd:bb:07:c3:e0:30:
06:b5:23:5b:ae:25:a1:73:25:a6:5e:b8:5c:a9:2e:
ba:63:87:b9:f6:74:1f:f3:d0:c7:d5:fe:f1:2d:91:
8b:1d:f6:8f:d5:74:5b:be:05:92:23:ac:cf:cb:99:
2c:49:8a:df:89:22:a0:ba:35:2a:a1:0f:16:d9:27:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EC:D1:BD:06:E1:7D:92:2F:31:CB:0C:20:64:F5:60:BC:40:8F:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/8fc8d0bc-3323-34e9-8040-60716980266e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
X509v3 Authority Key Identifier:
keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:11:28:b6:4a:e6:f3:ee:2a:4b:dd:fa:a0:3a:6a:41:05:b6:
03:04:e9:49:ce:97:79:14:c9:20:8d:78:1c:9f:7f:df:a3:b7:
0e:26:4e:3f:5f:c5:ab:60:9e:6a:6b:82:a8:8c:0b:39:a7:ee:
ad:b9:02:b0:b3:71:07:4c:d5:2c:76:93:e6:6d:e9:77:ef:6c:
4c:22:98:18:33:ab:c4:7d:55:3f:c0:db:5e:c8:7d:cd:ba:6d:
84:da:71:41:79:ec:11:5b:88:0a:b3:db:20:22:ab:41:46:68:
e9:bf:e9:5d:07:67:36:6a:c4:a5:3b:52:f1:1e:46:a6:59:35:
0c:10:7c:a7:4f:2b:3b:72:2f:96:6d:02:db:86:22:92:c1:f5:
7f:c8:74:2e:4a:9e:c2:c3:2f:60:d0:f0:70:30:48:d7:ca:85:
5d:38:6a:96:30:9c:2b:8e:e8:2d:16:94:56:ea:11:f5:6b:74:
47:03:44:7d:c2:08:60:0a:33:f3:00:81:ab:f4:f5:c9:2c:c4:
7b:e5:4f:95:da:67:19:92:68:e7:e0:36:81:85:b7:bd:af:7e:
18:9c:c9:99:5a:a9:e8:83:9b:75:f7:51:53:ae:92:eb:ac:01:
99:3b:80:28:1f:8a:eb:cd:46:00:79:c8:1f:7b:2e:96:2d:d4:
83:2b:bf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:01 2025 by rpki-client on console.sobornost.net