Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/55027072-44f6-34a8-afe4-17e9948a1fb2.roa
File: 55027072-44f6-34a8-afe4-17e9948a1fb2.roa (raw, json)
Hash identifier: YTl3A/M10xGX/n/BtlC6dAxG4/eoGpd42f/KEr4EvoE=
Subject key identifier: CB:52:42:53:8C:79:D1:FE:2F:F4:8A:6D:DA:BB:AB:46:99:DE:92:D7
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858490126C2BF0901D757C2395A80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/55027072-44f6-34a8-afe4-17e9948a1fb2.roa
Signing time: Tue 25 Feb 2025 22:47:44 +0000
ROA not before: Tue 25 Feb 2025 22:47:44 +0000
ROA not after: Mon 26 May 2025 21:47:44 +0000
asID: 7764
IP address blocks: 148.129.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:01:26:c2:bf:09:01:d7:57:c2:39:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Feb 25 22:47:44 2025 GMT
Not After : May 26 21:47:44 2025 GMT
Subject: CN=6ff55fbf-4231-4049-bff0-4850a5b93eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:c2:40:c2:6c:28:61:32:35:34:d9:d9:49:
f8:a2:6b:2b:8e:37:f0:41:d1:00:b7:a5:5e:93:26:
60:5a:4b:ab:31:03:3d:9c:d0:e0:3e:a4:c8:a4:da:
24:4d:81:91:f2:55:e3:45:51:87:18:a8:fb:d9:27:
bc:be:4d:53:00:79:14:31:41:50:4b:59:b6:de:5b:
bc:ac:00:d3:6a:d6:f6:b9:62:9d:fa:7a:54:04:98:
a4:05:62:a1:1d:e6:7c:31:1b:56:7f:ea:5a:1f:1b:
8a:21:ae:ed:be:f7:2a:e0:1c:36:a9:86:c8:ec:02:
02:28:e2:52:41:56:a1:de:5e:be:a1:5a:bf:ac:ff:
77:c6:53:3d:cd:fa:5c:47:40:a4:15:d8:60:83:79:
e2:64:4f:f9:76:db:31:09:5d:6b:aa:78:de:15:d0:
f9:1a:7c:66:ac:f7:c3:ff:75:6b:e9:96:7d:1f:16:
39:b7:71:36:de:e2:f1:66:9d:2f:e7:44:5a:aa:ad:
76:19:1c:0f:aa:2c:49:e3:47:d9:20:98:fc:5d:d0:
44:69:68:48:21:3f:0e:e3:4d:1f:a7:9f:7c:b1:65:
ec:ac:76:37:be:98:ee:ba:a0:03:e3:0f:e0:0f:6c:
5f:07:36:3f:0e:8c:c8:1a:01:aa:dc:31:b5:2a:be:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:42:53:8C:79:D1:FE:2F:F4:8A:6D:DA:BB:AB:46:99:DE:92:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/55027072-44f6-34a8-afe4-17e9948a1fb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
148.129.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:8b:ab:c0:7e:5f:4a:8b:df:5b:61:01:8f:23:0a:f5:a7:b4:
d6:37:4f:cb:e0:33:9d:fe:93:28:d2:2c:00:7f:9e:b8:1e:ba:
20:59:96:0d:05:3b:af:ba:98:72:e6:02:c0:1e:6f:d4:ad:7b:
a1:68:da:c4:9a:f3:f1:17:99:31:18:04:61:6c:a9:0f:a7:87:
d6:5f:be:83:10:5b:16:2c:af:33:69:18:a8:ee:a4:27:a8:1f:
da:ff:96:45:19:1a:fd:42:f0:91:a5:99:6a:05:48:48:13:6b:
9e:80:e0:e8:21:c0:79:cd:3a:1e:bf:8b:17:80:83:c3:33:90:
e3:40:53:d9:c0:5a:58:7b:cd:ae:67:aa:23:a6:82:cc:31:c5:
0f:79:ed:75:3b:e2:8e:6f:c4:50:fe:67:2b:23:f4:51:71:c6:
31:4d:f5:c5:89:8f:33:f8:69:c5:47:f5:48:df:6c:5c:67:0f:
78:bc:76:47:bf:71:5d:89:a6:d1:0a:1a:59:c3:07:32:f5:4c:
f3:c3:7b:3e:8f:a1:f7:eb:a3:67:23:03:aa:85:8a:0f:3d:36:
24:9a:d6:02:9f:1d:c6:2d:ea:7e:24:10:7a:f6:84:ef:33:81:
90:7f:d0:eb:45:59:9c:88:67:60:58:e8:79:5b:b0:b4:56:8e:
1b:b4:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:28 2025 by rpki-client