Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa
File: 33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa (raw, json)
Hash identifier: ZRjm+rlXc9JxbWlhRRt/Ztyn4F03qMkUjBcDVNN9Yg4=
Subject key identifier: 6A:30:97:AA:BF:7B:2D:74:4A:39:C3:05:C2:E5:59:76:D1:9F:79:73
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F432858493FE1E0367E11891B3079B300
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa
Signing time: Thu 20 Mar 2025 10:04:52 +0000
ROA not before: Thu 20 Mar 2025 10:04:52 +0000
ROA not after: Wed 18 Jun 2025 10:04:52 +0000
asID: 63199
IP address blocks: 148.153.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3f:e1:e0:36:7e:11:89:1b:30:79:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Mar 20 10:04:52 2025 GMT
Not After : Jun 18 10:04:52 2025 GMT
Subject: CN=86856c8c-afe5-4732-9d5b-5602c734c57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:74:5a:a4:03:2c:91:36:5a:87:d0:00:6d:
90:f5:32:0f:3a:84:8c:81:d4:7b:89:ca:1d:7a:bb:
dc:72:09:e0:f6:0b:69:df:64:a1:b6:06:f4:c7:ec:
78:87:60:95:7e:b4:68:55:f9:c0:1c:4c:ca:2c:b9:
44:ba:41:29:9b:df:ab:c8:8a:6f:d2:00:b6:6e:5d:
27:7b:9b:9c:fd:de:c4:0a:77:62:b9:d8:92:73:e1:
b9:c3:63:1e:02:18:4d:43:6f:5e:c0:40:73:4e:db:
5c:b9:bd:62:16:6a:ac:02:ad:9b:23:83:fc:15:49:
7c:be:e7:db:44:14:84:9f:81:a3:26:ad:36:7c:2a:
a8:62:28:00:62:c8:f7:f3:c1:9b:73:65:cf:0d:fd:
dd:65:37:92:1f:27:1b:04:06:0f:c4:15:4f:1e:51:
52:73:d4:12:81:5d:6f:1d:0b:a2:0f:74:08:5d:f4:
ce:a8:49:e1:24:b8:51:0b:08:86:a7:1c:1c:0a:09:
74:74:c1:75:0a:a1:8e:4b:25:11:09:36:59:76:8b:
ca:23:79:11:14:02:8b:5a:8c:b0:e5:05:88:d7:3b:
25:0a:59:2b:4d:5f:48:48:ed:f7:da:f0:ad:fc:3a:
64:39:11:a8:e2:51:e5:48:d2:26:aa:d9:77:99:14:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:30:97:AA:BF:7B:2D:74:4A:39:C3:05:C2:E5:59:76:D1:9F:79:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:10:0f:ff:aa:89:eb:80:82:1f:b1:87:82:01:13:77:0c:61:
92:95:a5:dc:fa:0b:96:05:b2:08:24:2a:b1:e3:59:09:26:3b:
f7:44:28:88:03:4b:a3:ae:c1:3d:41:ce:16:eb:77:df:d4:dd:
3e:19:21:d4:e2:e1:3e:82:07:a9:a9:aa:d1:5a:2a:ec:98:b0:
59:3a:22:3a:d7:b7:11:9e:9c:36:90:d9:a3:cf:a4:74:7c:5d:
ca:62:93:9e:ca:07:b7:42:9e:01:e6:1c:dc:b1:6e:e3:6d:7b:
46:93:85:fb:5a:c6:dc:f3:38:2e:1b:73:1c:a5:70:cf:11:52:
7c:77:04:03:70:26:39:1b:b3:20:be:16:2c:31:e7:c6:fd:40:
40:1d:b9:e9:60:59:cf:c5:33:79:c8:19:d5:b3:4e:a5:96:dd:
f9:29:40:c1:9e:16:ab:85:3a:9a:00:65:ed:a1:d4:16:28:8b:
1e:07:d4:6b:bf:a9:a0:40:2d:db:cd:6c:6b:a0:28:5b:00:01:
a5:35:27:d7:f2:58:29:f6:0e:1e:e2:7a:a9:89:20:49:c6:bf:
10:c7:ab:0e:58:95:37:aa:ad:31:a9:c6:63:c4:81:71:9a:0d:
e5:fa:ab:7b:f1:8d:26:7d:e5:88:c4:6d:6f:20:7d:cf:36:55:
34:2b:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:23 2025 by rpki-client