Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/ece256d6-0737-312f-bd91-0661d705f594.roa
File: ece256d6-0737-312f-bd91-0661d705f594.roa (raw, json)
Hash identifier: 44nwhabgKVzCgxTFADQTT65c0VtBPNEMFkdF6wPAjIY=
Subject key identifier: 48:CA:76:AE:F2:10:D4:E5:5A:89:BC:47:E3:22:25:E3:CC:69:24:9B
Certificate issuer: /CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Certificate serial: 010D0C9F43285845D3AB76E8D05DFAC16D787F80
Authority key identifier: 28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/ece256d6-0737-312f-bd91-0661d705f594.roa
Signing time: Fri 10 May 2024 13:27:07 +0000
ROA not before: Fri 10 May 2024 13:27:07 +0000
ROA not after: Thu 08 Aug 2024 13:27:07 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:d3:ab:76:e8:d0:5d:fa:c1:6d:78:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Validity
Not Before: May 10 13:27:07 2024 GMT
Not After : Aug 8 13:27:07 2024 GMT
Subject: CN=f53f3856-08a9-472b-b732-2723457e135f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:20:4b:5e:f6:6d:45:10:f3:3b:05:13:61:
21:43:21:e4:74:1e:20:fe:1b:09:a4:ca:ce:7a:44:
c5:0b:93:a6:f7:6b:ce:d7:4a:fa:32:a3:46:e7:81:
45:9e:1c:fd:7a:bb:83:12:35:a6:59:69:00:56:d8:
a7:9e:54:1c:db:94:bd:1a:38:71:fe:be:7a:b0:dd:
5c:da:02:31:14:3b:6a:58:76:5b:7a:0d:8c:21:5a:
26:83:58:6c:81:2c:96:41:ba:e3:c1:96:2b:4f:5d:
9d:a4:fc:f2:5a:87:65:e8:35:ec:30:86:74:0b:68:
3f:2c:56:53:68:7e:31:d0:68:7d:bd:00:e3:ae:a7:
07:5d:68:12:79:c6:ba:73:cf:8c:2b:43:88:c0:3a:
66:24:46:38:85:6f:8c:db:ca:cc:6a:62:44:18:fe:
88:a9:8b:59:5a:1f:23:48:f5:7d:e0:0e:99:01:03:
6f:94:7e:9b:0b:d7:46:fa:c7:d0:e3:cb:3c:a9:03:
63:85:d4:3d:d6:61:8e:25:c2:2b:47:8f:b0:0d:a7:
a4:3b:ed:a8:04:21:03:a4:22:3b:a3:d6:89:ba:91:
13:ee:73:a0:89:51:73:70:98:31:56:9f:de:cb:d2:
e3:25:6c:99:0b:65:61:d3:25:5f:64:87:dd:67:d4:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CA:76:AE:F2:10:D4:E5:5A:89:BC:47:E3:22:25:E3:CC:69:24:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/ece256d6-0737-312f-bd91-0661d705f594.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl
X509v3 Authority Key Identifier:
keyid:28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:1b:75:a9:16:f0:0b:2f:fd:9d:7a:dd:87:01:0e:5f:fc:6a:
c3:b2:03:7a:ef:fb:02:5c:54:27:c8:78:f2:47:a5:23:b7:ce:
97:80:d3:29:a0:b1:69:4a:8d:df:90:61:31:13:73:a6:24:86:
da:ba:1c:5f:25:34:c9:a6:c0:2d:df:36:a8:bb:70:84:19:d2:
bd:7e:8f:3f:20:19:37:40:52:11:23:f3:d0:d6:51:80:a3:fc:
0f:16:b5:a9:b3:82:2c:fb:a7:c5:cf:9d:29:0a:a1:29:17:a3:
50:51:b1:2d:9e:49:d1:fe:f7:75:11:08:17:61:39:0b:d7:1f:
e8:2e:5e:33:63:4f:be:75:cd:52:46:4f:0b:50:82:f0:80:1c:
0b:0c:ce:b7:d2:c4:5b:b8:50:34:c5:db:0c:f4:94:b0:1f:ba:
fc:76:9b:e1:60:ed:76:a1:70:6c:b8:32:ef:f7:47:25:fd:b8:
79:59:b9:ad:19:5c:98:42:89:97:f0:e6:5a:bf:85:b3:00:19:
0e:8d:25:d1:2e:22:c6:a3:9b:36:5f:6c:29:9b:98:76:61:84:
6b:6c:e3:86:1b:ae:a5:da:af:c8:31:84:53:81:63:20:91:cf:
e2:56:1b:dd:40:c4:74:85:b9:2e:06:ac:1c:49:e1:1b:da:a7:
f6:cc:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:26:33 2025 by rpki-client