Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa
File: 4e8c3eea-5290-39c2-8a92-9b920877b78a.roa (raw, json)
Hash identifier: 1yPm8wzZccswjsxTp8DuDUkr1YAAe3OtEhDBM4htHJc=
Subject key identifier: 59:B1:58:9D:8C:49:E8:B1:0C:A7:F3:A3:81:CD:2F:3D:AB:BA:A9:70
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F43285849806F1D36DDA150065AF0FC00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa
Signing time: Sat 12 Apr 2025 13:01:01 +0000
ROA not before: Sat 12 Apr 2025 13:01:01 +0000
ROA not after: Fri 11 Jul 2025 13:01:01 +0000
asID: 394354
IP address blocks: 149.112.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:80:6f:1d:36:dd:a1:50:06:5a:f0:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Apr 12 13:01:01 2025 GMT
Not After : Jul 11 13:01:01 2025 GMT
Subject: CN=c4ac05a2-2145-4d70-90e0-d04d65ec201f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:09:79:31:49:81:ee:6d:26:8a:54:e5:66:
42:23:08:78:36:ee:31:6f:3c:63:01:a6:50:34:62:
fd:73:57:ba:ae:ce:1a:59:ec:04:fb:72:22:9a:b4:
82:bf:8e:6a:14:7c:97:55:38:0d:0c:1f:e7:7a:9f:
e5:e7:04:65:5c:38:7c:4b:0e:0d:62:7e:13:45:70:
9d:fb:d5:00:8d:a7:58:6c:6f:dd:79:96:95:28:f3:
54:d3:03:c6:2e:43:bf:b4:27:57:b9:26:2f:06:20:
db:1d:26:11:87:80:05:c6:29:bf:1a:83:48:88:51:
14:02:d1:4f:97:40:b1:3f:f0:9f:53:61:f3:d2:40:
b4:cc:5b:c1:d2:0a:81:74:05:81:e8:46:76:dc:6b:
fa:16:71:19:de:03:36:61:a3:7f:7c:a8:62:e7:85:
e1:6e:7e:6e:27:2c:93:a3:95:b3:82:8e:6a:53:06:
cc:09:ea:f1:03:89:c4:8f:de:64:72:0a:bd:40:0b:
7a:ce:c8:ee:ec:e6:f9:dd:b0:ec:fe:b3:f0:8e:4e:
13:d0:00:a0:63:3a:d8:bf:95:0a:3b:08:98:5b:3b:
a1:04:5f:d0:be:8e:09:0f:45:19:0e:c6:af:1a:e1:
d9:fc:57:19:26:72:07:7b:ab:55:5a:7f:62:64:34:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B1:58:9D:8C:49:E8:B1:0C:A7:F3:A3:81:CD:2F:3D:AB:BA:A9:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f6:07:2b:9d:7e:41:51:95:66:0d:0d:ee:3c:30:42:da:9b:
a4:98:da:8a:ce:d7:05:11:87:2b:90:31:0a:aa:90:39:0b:1f:
b0:e0:bd:cf:02:8f:13:12:4d:39:76:19:2d:5b:91:eb:86:9e:
5f:a8:10:d8:1c:e6:4f:f6:cc:ed:bb:00:33:9c:de:44:2d:2d:
61:c1:e5:2c:74:3f:a8:8e:f0:85:0a:25:f0:8d:c7:d6:c6:32:
a2:58:f2:ce:a9:17:52:4e:be:6b:2a:b3:23:49:98:a6:ba:4c:
96:ff:4b:6f:75:4a:ae:97:21:ae:39:29:d9:ad:f9:32:a1:a8:
f7:bb:59:29:d9:f6:c1:66:b0:14:03:38:e5:ff:03:52:1e:a9:
74:20:d3:74:aa:b2:7c:1b:62:84:48:68:d4:fb:18:4c:41:e0:
c6:0b:f4:69:9f:54:ee:07:fa:5b:c9:ae:79:f5:0f:bd:f0:1f:
e4:1d:84:e1:c7:2c:15:1b:31:85:64:bd:28:f4:81:a8:67:0e:
b5:78:7e:06:de:e8:f8:03:58:63:8f:4a:22:b6:1a:a5:5d:29:
a6:42:c1:62:2a:30:2b:5c:52:93:4f:68:35:d0:5c:ca:0f:4d:
2f:34:11:5a:ee:78:92:21:b9:50:0d:1f:7b:31:29:49:3f:1d:
83:ba:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net