Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/81abf99e-6226-34a8-a0dc-3accb6842858.roa
File: 81abf99e-6226-34a8-a0dc-3accb6842858.roa (raw, json)
Hash identifier: j3dLBVN2t6P9oBxTxhqsVTyKBVnZeg1mPbPL/ds2Zjs=
Subject key identifier: 96:25:87:04:D7:0D:02:E7:7E:CE:41:55:00:9A:28:9C:93:91:9A:6F
Certificate issuer: /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial: 010D0C9F432858489BA0B602F074CB1E93D5F300
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/81abf99e-6226-34a8-a0dc-3accb6842858.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 26658
IP address blocks: 146.148.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b6:02:f0:74:cb:1e:93:d5:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=95d79931-70e5-40c4-9473-fef55a2d63c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:27:4c:1f:30:be:92:1a:0c:b7:4f:ca:02:
be:c8:e3:a0:d8:99:a2:60:86:9f:ea:0f:07:54:f9:
68:0e:cd:2f:00:20:76:d5:97:a0:d5:03:57:73:f7:
e2:21:91:43:7e:d8:97:12:46:bd:27:0d:9c:94:31:
a0:d3:67:ed:fa:00:02:32:c3:25:c8:4c:1f:89:7e:
b1:eb:90:12:dd:b9:20:6e:9d:fb:ae:4a:30:b9:4c:
52:73:8b:2a:a3:7f:60:7c:85:22:86:a3:2e:bf:f9:
97:4c:12:64:3b:ed:4e:78:5d:08:88:5d:0d:22:92:
5d:3a:5f:9d:6e:67:e6:04:17:a9:65:99:9c:c1:36:
61:3c:d8:85:3e:ea:e5:bb:df:b9:48:e4:40:86:72:
6d:1a:0f:ed:27:fe:6a:89:99:b3:89:03:40:4c:29:
4a:13:76:02:1e:ba:d7:f7:dc:12:c7:ad:f7:0e:3d:
4b:35:9b:ce:c2:7d:81:4f:55:54:12:26:f8:18:32:
54:02:51:b7:cb:36:99:c6:41:94:63:4a:ca:f1:07:
35:b6:0a:64:0b:2d:17:b4:30:48:56:60:49:ef:7e:
f4:eb:3f:4b:39:c1:92:11:b8:2d:6a:62:3a:25:e4:
e6:cd:e4:0d:f6:31:32:7f:34:e3:a6:f7:62:b1:a2:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:87:04:D7:0D:02:E7:7E:CE:41:55:00:9A:28:9C:93:91:9A:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/81abf99e-6226-34a8-a0dc-3accb6842858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
X509v3 Authority Key Identifier:
keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
sbgp-ipAddrBlock: critical
IPv4:
146.148.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:cd:6e:48:c3:5c:45:19:83:9b:a8:82:28:ea:bf:95:35:b5:
93:b9:2a:dd:7b:48:31:02:9a:11:1a:53:0b:e4:a6:d7:58:56:
f5:1c:ce:4f:16:e7:d1:1d:58:e2:50:72:df:29:0c:a8:b4:05:
1d:88:95:bc:2f:8e:76:21:1a:35:90:79:a3:ff:66:35:86:90:
41:e0:91:5e:5d:11:5b:99:41:58:3f:e7:0d:9d:28:07:4b:9c:
6e:81:9f:ff:a3:ed:7e:53:9e:56:05:9f:d3:c0:31:f7:04:d4:
76:2b:96:45:b9:c8:47:ac:87:02:ec:47:66:97:b4:65:6e:78:
fe:75:e1:d0:64:d6:ef:18:14:28:f2:c6:f4:a0:35:2b:b7:35:
c6:8e:04:7b:4c:a5:b8:fa:74:49:13:4f:66:1f:58:d0:c8:a5:
7b:7f:10:41:db:5a:c7:b1:34:88:df:5b:35:85:2a:84:50:56:
e4:d6:3f:e1:b8:d2:57:87:53:f3:b0:06:e9:74:57:2d:97:22:
e9:7e:ed:b9:55:b4:13:c5:21:ea:36:e5:3c:7c:b9:70:ea:d4:
a3:39:da:a7:87:e2:92:e7:99:40:4f:de:12:a7:c3:af:14:db:
93:aa:11:68:6a:5f:3f:4c:21:54:ba:c8:63:f4:68:61:61:bb:
62:10:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:01 2025 by rpki-client