Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa
File: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (raw, json)
Hash identifier: 8zWcV4y3LmVz6RTzQCkkErVc+7nZmlxrVNA3cSSEQ54=
Subject key identifier: 36:97:CD:88:20:7E:CC:29:AF:26:54:EE:8C:FF:84:DA:08:2D:75:D8
Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Certificate serial: 010D0C9F43285849244E7AB095BE9C1FF7EAD180
Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 148.59.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7a:b0:95:be:9c:1f:f7:ea:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=2bec175c-c150-4360-9447-7eba5828cd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:9e:a2:58:9e:0c:b2:a8:3f:59:e2:c9:44:
bc:ef:a6:7f:95:12:79:ed:40:10:d7:c6:35:d4:f1:
19:ca:84:90:37:58:71:2f:75:14:0a:d8:0e:07:56:
c7:e5:9c:81:79:b6:72:b9:76:05:8e:3b:37:8f:2e:
75:c1:e8:94:c6:c7:74:a1:12:28:c6:f9:72:a7:df:
9b:71:f9:2f:02:d6:95:8a:48:d9:18:27:74:dd:40:
e2:b4:78:5c:2b:5c:ed:23:9e:d3:67:c0:cd:79:76:
2e:97:e6:f2:d8:ae:d6:48:bc:56:af:57:4e:c2:16:
15:8a:53:2a:9b:5b:15:d8:68:b2:7c:15:64:56:93:
38:62:33:1b:bf:18:23:f5:28:fd:b2:c2:9b:dd:77:
c7:c6:d1:f6:95:90:3f:7f:c7:ba:a1:fc:08:bd:70:
f0:ee:20:fd:ea:92:17:82:9f:30:8a:c3:4e:3a:8e:
bb:3b:2f:69:f3:f4:2f:b6:a3:35:8d:db:2f:3c:c6:
05:0f:98:c9:23:12:ff:f0:ab:c3:81:c4:1a:32:73:
b5:2d:79:67:ea:1f:9e:ec:25:75:4e:0e:0f:90:37:
4a:a5:d7:68:6a:c2:1d:eb:61:40:05:31:bd:fb:90:
a7:2c:c9:9f:06:33:af:e7:9f:29:0f:16:fa:c8:fb:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:97:CD:88:20:7E:CC:29:AF:26:54:EE:8C:FF:84:DA:08:2D:75:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl
X509v3 Authority Key Identifier:
keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:e1:c3:eb:eb:26:d6:39:8d:e6:78:4e:13:32:27:a1:af:52:
7a:65:0f:2b:72:14:77:70:65:32:f2:94:15:b4:3b:5a:ae:3c:
ae:db:a3:23:c8:f8:c0:b8:e1:45:48:88:86:d6:c8:b5:ad:29:
02:ba:eb:d4:b9:f2:c4:f6:55:c8:75:9e:ce:28:c9:de:15:84:
7e:bf:b1:f1:47:de:fb:94:43:4a:e8:91:c9:c5:12:72:82:81:
45:0f:31:c7:d6:63:5b:42:bf:fb:95:d2:55:f9:aa:8d:6d:a4:
90:36:90:62:55:6b:40:9a:74:7a:56:e6:ec:71:47:09:46:9a:
3d:a3:c5:34:cf:46:0d:0c:8e:79:39:27:e3:c0:94:be:30:c1:
d8:b4:ce:df:71:ce:d3:aa:e1:55:bd:d8:cf:7e:50:3d:79:d8:
22:21:1e:50:15:d8:50:e4:b3:66:53:ce:3f:2e:8c:aa:03:d4:
4f:1e:52:cd:90:43:f0:02:fc:cd:df:0b:e5:de:40:d1:0f:f4:
9f:d2:d3:f7:a6:31:0d:61:f0:4e:21:aa:71:62:44:1f:1b:a5:
d7:c7:d4:d3:92:fe:84:6f:1f:da:a4:13:fe:70:96:48:e1:51:
66:8a:bd:22:30:8f:e6:76:05:4f:73:bc:11:6e:12:50:c2:4e:
92:b7:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:44 2025 by rpki-client