Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa
File: 7714cc44-3890-3c14-9f5c-e99518c1af61.roa (raw, json)
Hash identifier: c9bIDvoqP/n1Ja2SGAnsY5q8zJRhgskjt4BJ6BoVpNo=
Subject key identifier: 71:55:75:2F:C5:64:57:E9:4B:6D:0F:76:73:A0:73:CD:DD:C8:92:F9
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285848960B5C8617DE1129142B3200
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 63199
IP address blocks: 148.153.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5c:86:17:de:11:29:14:2b:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=a68f2422-da69-44a3-926e-756865c8ca24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:93:51:90:7b:44:c7:38:51:e1:71:7e:c1:
4c:63:ea:97:d4:0c:21:b6:c0:74:5b:ee:72:95:80:
d1:e5:3b:63:96:80:c7:e6:b0:01:12:eb:d9:a9:38:
40:d6:90:72:14:25:38:1b:0f:ee:a6:e1:59:13:ff:
e2:bc:cf:49:85:a4:62:b6:b4:16:d2:96:0f:5a:ac:
fb:92:19:81:c2:7a:1e:b3:c4:9e:81:20:2d:33:2f:
ff:b6:c5:1d:e2:82:34:d1:7b:19:7e:9d:df:dd:9a:
ab:af:59:45:7e:99:8b:c9:ca:85:3c:a5:4a:cd:aa:
a6:98:c6:4e:92:34:43:82:f6:7d:67:37:f8:48:0e:
57:5d:17:de:cb:28:88:dc:16:de:0f:8a:e6:9f:53:
39:ca:2e:52:58:fc:b7:01:29:0f:bf:0a:ad:70:3a:
bd:52:e8:56:e4:7e:f4:b2:66:9b:60:4f:e0:26:35:
b2:79:56:e4:9b:5a:ce:9b:e8:82:72:19:a4:b6:a9:
61:2b:b9:49:4b:d6:bf:27:1d:bd:0f:ea:db:40:37:
7e:c7:0f:cd:ba:46:fd:4e:6b:5b:98:dc:fd:90:b3:
7c:06:55:43:d6:f7:41:cb:ba:a7:05:9e:a0:c6:6d:
61:64:c5:96:6b:72:7c:81:4a:bc:12:c4:42:4f:73:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:75:2F:C5:64:57:E9:4B:6D:0F:76:73:A0:73:CD:DD:C8:92:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:63:73:a0:33:d0:c1:c5:60:71:6b:c9:fd:fe:6a:87:19:95:
54:de:75:71:51:02:36:46:99:87:a8:dc:a7:f9:2e:0e:c6:15:
49:9f:b9:3b:df:7e:c5:9e:ea:58:e9:69:3e:87:9d:72:4a:33:
1a:56:7a:40:93:48:dd:22:ec:96:5e:9b:47:7c:d8:eb:a6:4e:
13:e6:8f:f6:09:8d:38:57:19:1c:3a:76:24:2e:8e:31:02:c1:
1d:1a:37:52:48:e1:77:ab:9e:ec:94:b5:96:a1:91:14:a0:ae:
5d:c5:88:41:c6:21:38:84:ee:08:1b:b7:58:22:2d:d6:9a:37:
bb:f3:7c:76:12:e9:09:32:54:07:d2:d6:d5:f4:87:0d:b1:a5:
5e:d1:64:37:87:a7:6b:02:7a:de:36:bb:10:58:3e:fb:1c:a3:
1b:cc:bd:c3:1d:95:b8:b8:ff:92:c1:5f:d6:dd:f3:06:e0:82:
f0:51:62:2e:31:8e:54:42:0f:b5:16:44:09:85:24:04:00:e2:
e5:e7:a2:83:4a:85:d0:ae:6b:af:c7:00:5b:ea:20:cd:2c:14:
10:40:46:bb:87:8e:e7:df:90:39:93:93:12:fa:8c:6e:87:4e:
a5:a9:df:ae:59:bd:d4:77:5c:26:b7:33:ac:8e:e2:b4:15:e4:
c1:59:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:50 2025 by rpki-client