Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa
File: 48dc100e-8d7e-3d30-90c2-6334f2764387.roa (raw, json)
Hash identifier: nLa0FKto9Q3yIkVrFoUMiuwu2oXLoaUtwfNi00ftohU=
Subject key identifier: 4B:A8:3A:E9:40:A4:E4:EF:B5:55:37:61:A3:35:FA:D4:FE:D3:57:DB
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285848E2D11E00102F490A2FF4D380
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 63199
IP address blocks: 148.153.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:1e:00:10:2f:49:0a:2f:f4:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=26cf56cf-dad3-47e6-a4a2-ebce475dfb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4a:b3:fe:30:80:2a:0b:03:e6:e7:9d:2d:a8:
87:fb:90:39:73:1f:2d:ed:46:16:c9:16:7e:38:e6:
9c:92:3c:b2:60:00:1c:f7:1d:ae:88:14:0c:c9:93:
60:f8:8c:f2:2d:b7:6d:89:5e:10:6d:95:56:65:8f:
fe:a3:8a:38:74:da:6f:c8:f3:52:db:97:41:14:fb:
2f:cd:19:5b:45:a6:7a:b9:f0:90:92:ac:aa:0c:37:
ca:15:9c:f8:3c:11:4d:8e:b6:e2:e1:00:6a:37:47:
4a:6d:f1:1a:fe:eb:7c:0a:f4:46:64:41:97:e7:b0:
c9:53:c8:7f:c7:1b:7d:98:b1:9f:26:8a:d8:39:aa:
67:78:41:ca:52:38:81:fc:af:06:62:79:f2:a6:16:
55:ce:5b:0f:4d:33:86:5c:f8:1b:ea:8f:ae:e5:96:
ef:41:3f:20:db:69:58:0b:c0:31:6f:10:81:e9:18:
f8:59:40:8b:42:55:3a:69:65:e8:94:cf:99:1e:03:
05:1a:d6:15:17:5d:77:76:7c:ca:1e:57:13:49:d7:
1c:0c:2d:9b:57:77:91:58:bd:93:67:4e:54:d2:1a:
8f:cb:d8:a1:c5:d7:42:1c:93:75:9c:82:3f:2f:15:
4a:58:c8:aa:00:50:04:5b:8a:a0:89:d0:85:ed:f4:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A8:3A:E9:40:A4:E4:EF:B5:55:37:61:A3:35:FA:D4:FE:D3:57:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:ad:e7:da:d1:a5:8e:09:78:dd:06:5f:c2:9f:a9:48:37:9e:
54:a7:c3:44:d3:3f:bd:93:35:b6:43:3c:37:1f:20:2d:67:45:
cd:08:b4:bd:d9:71:71:b9:83:ef:bf:08:90:cb:75:4f:80:af:
00:e6:d8:9f:15:c5:1a:67:f8:84:b4:01:61:6e:d7:01:58:4a:
af:ad:13:50:da:e7:77:f8:a9:79:b0:1c:f3:fa:fc:48:a4:26:
af:74:b5:81:66:50:8f:a4:38:f2:f0:04:2c:bf:e4:95:0c:8c:
2f:76:1f:c1:0d:4c:aa:a4:6c:21:ce:82:f8:83:87:a9:c2:35:
f5:49:28:39:25:21:bd:73:78:48:46:59:49:1c:c8:6c:95:92:
89:c0:59:a1:28:51:ed:a8:69:c3:96:05:4d:c6:ba:51:1a:eb:
33:96:bc:2f:f7:ca:07:cf:1f:f9:d5:90:51:8f:0e:06:db:22:
70:a8:c2:dd:c6:c7:55:15:05:ed:b4:62:d8:ee:67:bf:a4:51:
ab:cf:c0:ff:8d:d0:46:ff:80:ca:d1:56:d5:47:9c:da:fa:b0:
ac:06:80:08:a4:0b:eb:be:4b:25:fc:f3:1d:7f:94:13:fe:ce:
e2:ae:fd:80:90:b7:72:c6:84:26:66:72:4b:ba:5d:50:99:f8:
b5:cd:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:55 2025 by rpki-client