Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa
File: 1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa (raw, json)
Hash identifier: dh+0N9xgcy6DgAn6gBOU3bpGUr3+HjAh+K5uo5bjkDI=
Subject key identifier: 52:E9:83:70:53:6F:5B:85:B6:E8:84:04:ED:1E:E7:4A:22:62:05:A7
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285848A13611446CABA25DBEDA88C0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 63199
IP address blocks: 148.153.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:11:44:6c:ab:a2:5d:be:da:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=e7c0b962-2a05-4c61-8f46-554ad04cb664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:ae:0b:b7:00:29:1c:8c:05:43:19:4b:18:
ff:aa:a9:97:f3:b3:28:75:76:94:3b:3f:8e:03:d3:
29:fd:0a:c2:21:81:05:5b:07:8c:ab:67:bd:b7:81:
19:54:66:fe:2d:09:11:96:f8:20:44:02:62:ef:63:
aa:f4:89:da:b6:ef:24:4b:39:a1:23:04:30:67:d6:
84:d0:25:88:63:08:dc:0a:e6:cc:0d:6b:9a:d6:91:
4f:55:95:83:a1:d1:bf:09:74:0e:90:b7:3b:2e:1b:
a1:7d:3b:1d:fb:5a:88:b8:95:6e:23:1b:90:13:a2:
ac:b8:ba:bb:62:5a:07:65:c1:23:f4:2c:fd:c9:9d:
de:79:10:4b:99:79:d5:69:3f:13:23:0f:e1:aa:5d:
54:9c:55:1a:70:01:41:b2:71:01:88:84:d7:e6:3e:
fa:b9:a7:57:cf:ab:b4:a3:29:57:c7:9b:fc:ad:ce:
e9:18:3b:ca:17:a4:b0:25:43:f7:d7:84:21:3a:bb:
05:b5:ea:9d:13:f9:62:99:ab:dd:88:79:33:20:c6:
f2:22:05:f2:d8:65:f8:0a:39:97:c2:85:fb:02:ea:
9a:18:bc:1a:13:41:c9:61:36:80:5c:ae:a7:09:9d:
03:fc:c5:73:73:c4:a8:9f:70:83:8c:0c:37:43:a0:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E9:83:70:53:6F:5B:85:B6:E8:84:04:ED:1E:E7:4A:22:62:05:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:97:ad:72:95:15:88:fe:14:91:73:0b:6b:c8:a7:1a:40:9a:
88:29:11:9c:88:73:35:5e:9c:69:29:05:23:06:9f:8c:bc:9d:
2c:e9:96:cc:cf:64:14:38:7d:34:83:ea:92:73:b6:6b:34:1e:
da:a3:99:03:eb:5b:97:e5:69:dc:06:9a:d0:56:28:4a:4e:ff:
04:f4:b5:58:d3:74:78:ca:26:da:f6:85:1a:28:49:78:22:f3:
08:c0:a4:2c:0b:9c:52:f1:82:10:c3:3c:d0:c9:44:21:97:7a:
d3:b3:be:e1:06:92:f3:da:b4:ee:27:17:1a:25:7a:f9:9c:95:
3a:96:bc:cd:11:5d:bb:51:6f:c8:de:42:c8:58:c9:19:43:aa:
68:4b:fd:fc:61:ae:48:19:e8:bd:f7:46:12:2e:aa:99:1d:20:
3b:d4:d6:a5:f2:c9:9e:18:76:12:28:67:c9:07:c5:7b:23:a6:
50:4a:ea:e7:d0:14:96:93:33:b1:03:77:3e:6d:52:9f:63:f4:
af:bf:bf:70:f3:b2:22:f0:ea:37:3b:85:02:dc:a8:fa:95:b8:
1e:b8:9d:7c:d3:12:0b:70:22:7e:36:c5:24:37:7f:ff:a8:96:
a5:f9:fe:e3:10:11:72:17:a7:dc:3a:6c:f0:d5:e4:f4:a0:53:
c8:a1:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:25:17 2025 by rpki-client