Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58ffa724-62e9-44ed-a24d-7d1bbb377af0/60f63c22-1006-3995-9f50-8834435979e5.roa
File: 60f63c22-1006-3995-9f50-8834435979e5.roa (raw, json)
Hash identifier: XPfja86aHVo/KE97XoFNBs7odv2OKEHTCNr+Zr8qL4Q=
Subject key identifier: E9:FC:92:9E:6B:36:AB:C4:9A:85:51:8A:20:B7:2B:06:65:A2:74:38
Certificate issuer: /CN=58ffa724-62e9-44ed-a24d-7d1bbb377af0
Certificate serial: 010D0C9F432858499144FA2D1F064709D9C8AE80
Authority key identifier: 0F:60:48:F6:81:54:56:E2:6D:BF:AE:1E:3B:5A:94:E9:47:78:FA:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58ffa724-62e9-44ed-a24d-7d1bbb377af0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58ffa724-62e9-44ed-a24d-7d1bbb377af0/60f63c22-1006-3995-9f50-8834435979e5.roa
Signing time: Fri 18 Apr 2025 13:45:01 +0000
ROA not before: Fri 18 Apr 2025 13:45:01 +0000
ROA not after: Thu 17 Jul 2025 13:45:01 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:91:44:fa:2d:1f:06:47:09:d9:c8:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa724-62e9-44ed-a24d-7d1bbb377af0
Validity
Not Before: Apr 18 13:45:01 2025 GMT
Not After : Jul 17 13:45:01 2025 GMT
Subject: CN=a3b77e47-1fc2-42cb-ae0a-3a9e6787b0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:a0:e6:fd:92:b7:54:59:ca:bc:c0:3d:19:
97:09:38:b7:da:b2:2d:8b:d9:c3:e2:38:4d:07:24:
ea:58:dc:e3:5e:31:af:63:5d:57:68:7e:df:a1:7c:
4c:05:55:a8:38:97:71:b7:78:eb:f6:cd:d3:1c:25:
7b:4f:3e:33:ac:43:b1:e5:53:2f:96:e3:fd:96:29:
5c:de:d3:10:39:2d:44:6a:93:b8:f3:ea:48:04:10:
f0:78:0a:1f:dc:5f:b1:2b:ee:9a:3f:de:2b:49:89:
e4:33:70:9c:f7:66:13:f8:08:ff:b5:41:7a:46:d6:
f8:71:1c:5a:ba:bd:d3:aa:18:64:d0:c4:a8:e1:7c:
79:49:1f:1d:f7:91:c0:86:65:eb:c4:83:b9:84:6e:
d2:d3:74:de:2e:ee:73:b7:ee:19:99:54:e0:cb:9b:
1f:3a:fc:d3:84:ea:00:a5:7a:29:7b:c0:05:35:49:
c1:50:fd:85:e5:17:a5:56:62:b6:53:61:b6:ce:ec:
37:a6:86:66:1b:8e:6b:b1:74:cf:e7:07:e9:b4:97:
a8:7a:63:a3:e6:c2:66:34:94:b6:d4:f0:33:05:94:
2e:39:4a:fe:00:93:d1:ec:bb:6b:94:18:e2:85:b0:
0c:fb:d1:85:0d:74:bb:5e:40:ef:ff:84:31:a4:ee:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FC:92:9E:6B:36:AB:C4:9A:85:51:8A:20:B7:2B:06:65:A2:74:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58ffa724-62e9-44ed-a24d-7d1bbb377af0/60f63c22-1006-3995-9f50-8834435979e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58ffa724-62e9-44ed-a24d-7d1bbb377af0/58ffa724-62e9-44ed-a24d-7d1bbb377af0.crl
X509v3 Authority Key Identifier:
keyid:0F:60:48:F6:81:54:56:E2:6D:BF:AE:1E:3B:5A:94:E9:47:78:FA:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58ffa724-62e9-44ed-a24d-7d1bbb377af0.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:04:28:ed:90:bf:45:91:a0:1f:8a:22:5e:04:c1:dc:1b:5d:
d0:75:9e:e6:01:6e:07:9f:e6:d8:3a:e8:68:42:c5:92:1c:d5:
04:d9:92:ec:fe:ec:9e:43:04:d8:cd:5b:df:dd:cb:08:11:51:
bb:20:f8:81:a5:45:ff:65:bf:1b:9a:40:45:11:b1:5e:53:b9:
1c:bf:50:8a:7f:f9:f2:2d:7c:0d:c5:0e:69:cd:ba:2e:55:47:
e1:7a:66:48:8f:ca:29:26:09:b5:f8:11:07:f9:92:97:21:59:
51:ac:41:08:92:88:ee:18:35:ac:32:37:d1:a1:89:bd:91:90:
35:dc:2b:3c:ab:a8:92:a4:fd:39:24:ea:a4:bb:71:45:98:77:
3a:61:99:28:ba:e5:f0:f8:02:9b:a3:3e:05:2a:bb:ce:55:4a:
57:75:1b:f8:0e:9b:32:cf:ae:39:6f:2e:07:8e:cb:58:75:df:
cd:bf:33:6f:63:c4:f0:e3:ae:9b:9d:03:ef:df:5f:51:42:9c:
25:c9:a9:35:b1:63:59:ad:bb:b8:2b:59:a9:e8:97:d4:79:93:
a0:e4:4d:f6:0e:2c:5f:a3:a6:86:6f:67:6e:69:11:41:23:5a:
5c:74:6e:d2:56:60:6f:11:07:1d:71:32:e6:29:4a:90:ee:f0:
db:fc:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:37 2025 by rpki-client