Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa
File: 37219094-f4ad-3a5e-a5de-82c59292ef7c.roa (raw, json)
Hash identifier: g4h4l4n6qLcNuu0TvV420QoUsJLf/jUe9GuDx2Is4Vg=
Subject key identifier: 2B:E3:61:A3:5A:B2:79:2A:BB:40:B9:F6:DD:98:00:D1:93:9A:42:90
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858494733DAFCD019209467DE2EC0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 23154
IP address blocks: 148.164.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:da:fc:d0:19:20:94:67:de:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=461899ec-9203-47b5-ac07-1adcab5e9398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:22:54:73:80:e7:40:95:fc:6b:62:c7:9e:
32:49:0a:8e:5b:da:0c:23:de:b3:20:55:72:c1:71:
58:a5:ea:d5:9f:7f:98:a9:e0:b6:e5:15:f6:0b:5b:
5f:33:cb:b5:fa:77:96:4c:da:dd:8c:99:56:c0:a0:
41:2e:a3:08:29:f7:30:2f:e5:bf:0d:55:91:d5:fd:
6c:73:d1:88:dc:05:64:b0:e5:c0:87:59:31:42:97:
78:de:7c:8d:69:b8:b1:20:95:97:59:24:fa:f3:8d:
34:cf:83:38:73:e0:59:e2:43:fd:0d:1a:30:29:cb:
50:e4:3c:d6:25:af:17:4b:dd:69:43:70:92:7e:ac:
e1:79:72:c9:0b:09:ae:0d:be:7e:15:f2:35:3b:bb:
ff:c8:5d:07:71:11:21:26:47:78:33:a0:02:74:9f:
be:1f:5e:17:83:15:ad:ca:81:9d:25:a1:bd:77:ce:
83:25:7a:d7:b7:34:4b:c7:79:51:ec:b1:78:7d:2f:
3e:35:bc:f6:c7:08:1d:12:cc:f9:c9:19:13:70:af:
0d:43:1e:71:3c:2e:83:85:ef:4f:a6:09:cd:89:10:
a2:7a:f2:3b:35:8e:f4:c5:95:07:aa:96:b1:36:21:
62:7c:c3:57:36:52:2f:e2:97:6f:49:e4:a0:35:6a:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:61:A3:5A:B2:79:2A:BB:40:B9:F6:DD:98:00:D1:93:9A:42:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:92:0c:7b:37:7a:50:80:e5:d3:18:f7:6a:ee:43:6f:6d:60:
4b:f9:4f:19:05:e5:1a:7a:97:ee:30:3c:a5:8d:52:95:73:63:
d4:e5:1c:ba:a2:9d:a9:ea:7d:cd:66:82:c5:aa:86:d9:3b:d8:
58:1a:6a:fa:f2:ca:33:10:ab:58:4b:d2:40:1b:5d:64:97:57:
1c:48:7c:e3:10:c8:85:4e:49:38:7d:19:f0:3e:7e:6b:0e:40:
a5:b6:25:ba:b3:71:ba:52:5f:78:04:be:7f:4f:d1:0b:5c:83:
0b:d1:c4:21:4d:cd:d5:2d:0c:e9:ef:0d:83:0d:1e:70:fe:8c:
db:5e:dc:e4:55:55:92:35:95:65:c8:87:59:d4:c0:fa:25:95:
95:00:58:0a:fe:05:ec:4b:43:c8:e8:42:56:a2:0c:9a:51:7e:
1c:73:91:57:2b:ba:4f:c2:78:b5:74:d2:e7:ae:01:b7:82:c8:
c4:41:d4:ed:ff:fd:ec:a6:0e:3e:ea:45:01:71:19:89:b1:17:
c7:a4:f3:1c:4a:85:63:4e:59:95:b7:2a:38:e2:ba:6e:65:b9:
30:bc:45:9f:77:83:10:40:5f:35:8e:ae:84:17:c2:11:9a:d7:
e3:cc:2c:f4:13:49:ad:62:86:d6:ad:ff:2d:5c:14:e1:c1:ec:
a9:ff:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:18 2025 by rpki-client