Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa
File: eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa (raw, json)
Hash identifier: ETbB+zIpfi3iOdyBMcRrz9dQIIwNHIzdTspZbweb+fg=
Subject key identifier: C9:C1:25:3C:04:39:AD:21:B9:65:FE:B9:A0:53:9A:B3:A9:02:BE:28
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F43285848EC9686A2A862810A4C28EE80
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 148.163.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:86:a2:a8:62:81:0a:4c:28:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=35d2fb3e-6330-4fd3-898e-448840395529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:0f:9a:6e:3e:d1:a6:1a:58:d3:65:e8:73:
a6:ee:37:83:2c:a8:e8:ee:b5:ab:32:be:22:51:ec:
72:92:fb:f8:0c:b7:a2:c8:f0:84:bb:48:ea:b5:25:
92:03:18:32:46:9e:aa:4b:f8:65:c0:d8:5e:18:8b:
18:b3:cb:1a:d9:6c:1a:ff:ad:f7:39:30:a8:ec:db:
22:10:83:8a:19:62:2e:57:6e:e9:ab:37:f8:e3:13:
ba:fe:60:45:5b:43:ff:e9:bf:bb:bd:e8:17:97:7c:
65:8c:7a:cc:dd:30:83:3c:d3:ec:f7:02:37:94:7d:
62:f9:ad:d1:6e:81:6c:1d:79:e5:60:d1:aa:98:87:
1f:9a:71:7f:57:aa:d6:a7:01:c1:6c:8c:74:d2:ec:
e7:cd:12:00:e9:45:ff:35:23:ce:76:5e:55:cf:86:
8e:2c:bd:2e:34:63:51:00:8f:5e:82:8d:95:6a:aa:
14:59:13:6b:f6:18:00:3b:b5:7d:7c:f9:fa:5e:73:
db:03:24:81:9e:00:be:26:af:2b:ad:7c:14:39:d1:
8d:e0:a1:7b:a3:af:0f:84:32:31:52:c9:6d:48:bd:
2c:62:e5:26:dc:c1:a3:8e:23:fa:3f:44:32:05:13:
5f:b2:81:36:ea:75:16:9a:38:35:24:d8:a5:93:24:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:25:3C:04:39:AD:21:B9:65:FE:B9:A0:53:9A:B3:A9:02:BE:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv4:
148.163.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:8d:3f:f0:06:77:6a:06:54:f6:0d:4a:d8:d4:33:fc:f3:93:
48:5c:57:cb:cb:86:05:09:3e:a2:38:c0:49:69:fa:35:60:45:
15:52:96:dc:f6:e4:55:63:5a:10:11:25:af:b5:26:fe:ba:05:
47:85:dc:f2:cc:28:12:53:3d:1e:b2:62:2c:b4:85:ad:c0:ad:
2c:ca:39:73:22:fa:07:2e:68:e1:27:9d:0b:43:87:e2:d9:a4:
c2:78:16:ce:12:86:a2:b7:96:e7:c7:4b:5c:9b:ac:91:5e:60:
76:0f:53:37:59:0f:8e:d1:b7:f8:3e:2b:d9:53:31:09:a4:29:
6f:7e:8c:a1:c2:32:0c:9f:5e:6d:b6:a6:b2:2a:f2:33:e5:0a:
c3:fc:cb:81:66:a6:70:b7:c1:9e:72:bd:f8:34:69:23:53:d8:
68:cf:c5:9a:3f:75:79:c4:28:f7:38:1c:e6:b2:b4:d0:7b:d2:
79:aa:8d:ef:8e:54:0d:2d:8d:de:38:28:48:d9:a5:64:6a:15:
9e:35:9c:37:e2:13:0b:e1:bf:cd:cd:a7:57:c6:75:22:33:9f:
1e:a3:6c:7f:b1:d6:79:af:72:db:6c:b1:85:7f:2f:a2:37:cf:
d5:fa:e5:d1:c1:37:7f:37:54:c8:cb:2e:fd:8f:6d:82:fb:4a:
6f:3b:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:30 2025 by rpki-client