Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa
File: 49372caa-80a6-338e-b361-ca20bbf60b2b.roa (raw, json)
Hash identifier: rRIl6/imDudR3dxaAQRdWKUQKtak0NJfxjm3WuQUAss=
Subject key identifier: 61:E7:76:4A:2A:16:65:09:0A:81:A2:CA:80:FE:A8:A1:A6:67:4D:F1
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285848960B5C6A66CE011244291C40
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 63199
IP address blocks: 148.153.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5c:6a:66:ce:01:12:44:29:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=1cce126d-0ddc-45ac-9eb5-0482a187081a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:2b:95:78:4b:7b:38:87:32:0f:b3:5a:75:
9b:81:d8:22:fb:71:23:f3:2b:65:f7:5b:f0:31:9e:
14:2b:fe:a6:c6:70:c1:b5:a2:14:ee:0a:8d:84:62:
6c:12:bc:8c:f7:4e:87:7c:46:cf:01:c7:55:8e:1b:
cb:19:2e:2e:3d:cb:74:d9:da:19:82:b5:cc:6d:9e:
d1:fb:c3:b1:1b:f4:99:8c:f3:ab:e5:96:99:43:c9:
95:d2:4e:65:07:3b:8f:f2:91:ad:b0:5b:67:0a:61:
ec:03:8d:9a:af:2e:9b:4b:97:ce:82:43:90:69:78:
e2:93:3a:03:90:b0:5d:e1:5d:0a:62:67:87:d8:fc:
c8:57:76:a4:a2:33:ee:08:9f:f7:6e:65:e3:c0:74:
99:51:0c:06:ce:d3:6c:3a:39:cd:44:34:54:4c:7d:
9a:4c:d5:99:11:a9:de:e9:3d:a1:99:a6:04:7d:23:
b0:ac:36:e6:9d:b6:76:35:a3:1a:a2:5e:75:fc:e7:
a7:5b:bf:7b:1e:0d:27:d5:8c:00:48:63:39:4d:3d:
7a:e4:0a:7d:6f:a0:3d:19:e4:94:28:af:6e:90:52:
fa:c1:1f:16:39:0a:25:de:3c:8f:63:78:73:63:07:
4d:72:45:5e:c7:01:57:88:86:64:2e:fa:bf:6d:e1:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:76:4A:2A:16:65:09:0A:81:A2:CA:80:FE:A8:A1:A6:67:4D:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3a:4b:b1:c6:91:40:f2:87:4e:91:7f:7e:53:86:a5:0e:f6:
7e:1e:34:23:86:2c:c2:3c:d5:41:85:58:79:52:47:0c:74:52:
bf:65:81:30:b1:e4:44:f8:1e:c2:ae:2c:7f:8b:40:da:0e:ee:
04:34:bc:33:e6:54:30:6d:d3:ab:7d:87:1a:73:6a:f5:da:2a:
e3:9e:ba:c2:1c:2f:62:c5:7c:a4:a8:0b:2d:b1:95:49:d2:45:
1e:5a:c5:11:26:ed:a7:49:ab:b4:aa:35:67:59:d6:81:94:90:
b1:be:a1:99:c7:91:80:0b:0a:e8:f2:09:b3:39:2f:3c:dc:5a:
a7:54:42:1a:eb:44:a4:10:cd:27:1b:4f:d9:f0:af:29:b5:b3:
07:6e:19:60:b3:ab:e7:ee:36:f6:b8:f1:06:79:52:b2:76:34:
43:56:78:f5:e8:93:30:39:b9:c3:b9:9b:85:e0:44:0f:57:39:
75:4a:0a:bc:c1:8e:f2:41:ec:84:39:9d:b4:3b:ae:a0:0f:c5:
ad:f3:87:fe:bc:fd:67:ec:ca:e8:5d:56:58:c4:2b:c6:da:2b:
f4:9a:1b:c3:c0:a3:45:e4:52:5b:56:7e:6d:14:93:0a:4e:cf:
c6:78:19:cf:61:f6:5c:1c:7e:a4:68:7f:46:03:89:b2:70:3a:
4d:9a:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:12 2025 by rpki-client