Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa
File: 6b7c028f-569f-32db-a599-301f156d588d.roa (raw, json)
Hash identifier: nJ3zW1IwjrP59O9EBkxubRso6Gw+9seXYUTQMi0VdXs=
Subject key identifier: 49:7C:60:25:C3:9F:D1:99:E2:E3:9D:4E:C2:45:B3:EC:CF:FC:5B:EA
Certificate issuer: /CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
Certificate serial: 010D0C9F4328584950F96ADD1ABEFA66C402B600
Authority key identifier: FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 16509
IP address blocks: 148.59.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6a:dd:1a:be:fa:66:c4:02:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=049e6146-5a93-43b8-8287-4bacae4016c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:b2:04:81:c1:96:68:63:ac:23:f6:d8:0e:
13:a1:3d:95:4d:f5:6d:f8:2e:7c:28:43:46:48:89:
93:23:65:f9:66:e1:d1:49:18:0d:ef:8c:a3:2f:44:
6e:96:61:3e:a1:14:9c:48:c2:b1:80:c0:59:55:41:
31:13:70:f5:24:7f:bd:a9:2b:bd:97:0f:68:e7:a3:
f2:74:6c:ce:9e:ed:06:43:f4:13:b8:3f:da:4b:bb:
b0:5e:5b:52:66:03:02:fa:5f:b1:ea:b9:d6:42:f7:
3c:13:df:b2:8d:16:69:5e:87:f3:ac:b7:f7:68:ab:
85:27:04:e8:78:78:94:63:51:a4:31:35:a6:d8:c8:
d2:e0:73:7c:b7:bd:f7:26:d5:db:48:76:ef:56:2c:
ff:a8:06:20:de:47:17:5f:55:cf:ba:9b:69:b6:8b:
7b:02:e5:7e:7a:59:e9:45:29:2c:4b:d9:fc:82:73:
d4:5f:05:f4:11:16:0f:a8:d7:a7:01:f6:c8:b1:be:
05:66:bf:15:c2:02:39:bb:ff:98:d9:63:96:9a:9c:
ec:bb:00:81:3a:4b:1d:52:65:53:74:99:3b:1e:4d:
17:42:7d:4d:0a:24:05:d4:51:8f:12:25:2f:15:86:
80:7e:cd:24:10:3e:af:dc:f4:84:38:81:5a:5f:95:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:60:25:C3:9F:D1:99:E2:E3:9D:4E:C2:45:B3:EC:CF:FC:5B:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl
X509v3 Authority Key Identifier:
keyid:FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:ec:e3:c9:a4:e8:73:71:63:f4:6e:f7:3f:81:c9:d9:23:1d:
19:39:c4:9b:6b:58:ad:b7:bd:42:1c:c2:9a:d9:47:61:ea:1c:
92:27:67:4e:d5:2f:bb:1c:33:bf:a0:54:e6:fd:33:09:05:46:
7b:3f:c6:40:6f:62:9f:77:a9:b0:a1:17:98:3e:37:a8:b6:a9:
b0:2d:00:e8:63:93:b0:13:a5:9f:76:ec:be:e5:f9:1c:11:dd:
aa:e4:f9:4e:52:47:fe:be:41:ed:2c:eb:d5:ea:a9:cf:bb:58:
5a:c3:5d:48:10:61:07:02:ff:d8:8d:7c:ad:50:ea:f8:63:03:
fa:df:cb:da:72:ba:97:63:ac:9f:3b:67:13:b7:c9:08:c7:2c:
fb:82:70:a7:8a:9f:50:21:11:7b:89:b7:eb:bf:b2:5a:cf:2a:
1d:84:d9:ff:b0:84:8c:0c:59:ff:fa:13:37:02:18:e0:fe:15:
5c:c3:ae:1e:1c:81:72:ed:89:8c:a3:f1:d3:83:37:17:33:4a:
d1:81:74:88:f9:e6:bf:83:9e:bd:5e:4f:06:2e:67:9a:f1:ec:
65:29:79:c0:1c:0d:96:b4:29:01:0a:cd:c0:53:da:03:80:a3:
cc:2e:8b:4c:be:37:79:d1:f7:4d:fe:89:7d:77:d4:ad:eb:4d:
1e:d3:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:01 2025 by rpki-client