Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e4a82e59-0553-3570-87e0-c71481eb42e5.roa
File: e4a82e59-0553-3570-87e0-c71481eb42e5.roa (raw, json)
Hash identifier: amTi2Y2daKStqAvXaV0sCPtwVjflhyROYEqyJLs95DU=
Subject key identifier: 5E:57:04:7B:24:27:73:F7:69:F2:A3:BC:C6:0F:DE:FB:7C:08:BD:E5
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858494733DA90F2A7BA99F70D6100
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e4a82e59-0553-3570-87e0-c71481eb42e5.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 23154
IP address blocks: 148.164.22.0/23 maxlen: 23
148.164.22.0/24 maxlen: 24
148.164.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:da:90:f2:a7:ba:99:f7:0d:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=3ff56d68-2bfc-4cb0-b5fd-52b04fefce4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:5e:78:5f:1d:25:67:af:72:58:41:63:09:
21:15:13:a8:22:4a:1c:f5:ba:c2:29:f6:be:a2:d7:
87:59:e1:6b:26:49:71:e3:4d:4a:72:51:1e:cc:11:
cc:0e:a0:eb:96:f8:ad:c3:e7:cf:9f:3d:e6:36:d6:
39:dc:f0:b0:b9:aa:93:f8:4a:6c:a7:09:26:1a:d4:
2e:9b:f7:9e:47:4a:dd:e3:f9:da:78:6c:d0:2e:7d:
00:47:8e:0b:14:51:f5:9b:48:53:09:cb:e8:1d:e7:
c6:f8:5f:e2:8f:96:23:32:a1:17:d5:09:9b:ab:07:
cb:f9:ac:f0:d6:bd:90:5e:e8:63:11:86:bc:ff:d9:
ee:02:7e:22:f8:9f:c2:17:a7:36:e4:50:6e:a5:25:
8d:85:6b:f4:b3:d0:88:2a:98:32:82:4a:bd:ff:56:
15:42:cb:54:2e:ef:22:e3:7c:1c:e8:34:c4:2a:3b:
fe:d2:21:9b:ee:e2:5b:fd:18:ab:00:fb:2c:b0:07:
40:90:ba:68:90:86:51:a2:d6:09:d0:26:dc:07:3f:
bc:ac:79:87:0f:fd:2e:0f:2e:a3:f7:ae:b0:3a:30:
8d:f4:bc:62:a6:b5:ef:8d:c8:a0:9a:b5:d2:dd:71:
c4:08:95:a4:bf:38:91:44:34:5b:ea:45:fd:ba:da:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:04:7B:24:27:73:F7:69:F2:A3:BC:C6:0F:DE:FB:7C:08:BD:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e4a82e59-0553-3570-87e0-c71481eb42e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:65:45:74:45:f9:c5:35:bd:a1:02:0a:f0:be:21:4f:fa:74:
f8:7d:1d:e1:32:25:d7:a6:cb:0e:c9:af:b7:bd:fd:47:94:8c:
c4:2e:dc:5d:4e:3c:26:b6:52:bb:b7:c9:1c:34:df:cc:12:73:
1b:d2:b3:33:2b:5a:61:70:ff:41:c7:a7:d3:78:c3:ac:cc:a8:
80:99:10:33:64:52:27:d1:42:65:44:71:52:d5:41:d8:ba:b6:
5d:8e:e4:53:e2:2a:ae:5e:aa:94:e6:4b:36:b8:a0:26:33:7b:
53:fc:17:a7:af:71:db:04:b3:85:bc:a3:f8:f2:35:c6:f8:1a:
c9:20:f2:96:68:b3:5e:52:6c:6d:19:14:f4:e0:bb:ba:63:85:
f7:45:c8:dd:cd:16:20:f6:0a:04:b9:7d:e7:47:1d:0b:7a:e5:
08:05:c8:00:d0:21:cf:d2:c8:2c:89:9f:18:17:c9:f5:bf:35:
a5:da:56:c1:81:20:e0:6c:68:46:5f:f1:ad:24:00:2d:af:73:
68:98:cc:7c:09:02:9a:0a:1c:f7:2b:2d:c9:93:34:17:d1:e6:
0b:2e:e9:ac:dd:6b:2c:50:c3:cb:d6:7b:70:22:82:36:81:9e:
b6:95:37:37:d8:86:5c:fb:2b:c4:93:ab:17:de:0f:49:81:19:
c7:54:9a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:01 2025 by rpki-client