Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa
File: a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa (raw, json)
Hash identifier: CwgHoZF8oNUhcJHn0zWMDHlLv4tHNN3ImzO97YdD7bA=
Subject key identifier: 94:D5:B0:D3:2E:98:51:5F:0D:B5:D3:10:37:9B:4E:73:FC:2F:C7:A3
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F432858488AE0A9350ECAAC46CF9F58C8
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 63199
IP address blocks: 148.153.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a9:35:0e:ca:ac:46:cf:9f:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=dc8ff75a-c4a1-4550-b701-7c19888ff06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:1b:66:e9:1d:de:08:48:d1:67:9a:cb:b4:
52:05:1d:04:ec:0c:7e:c9:17:83:c0:bb:63:53:84:
f5:d0:40:b0:c5:36:fa:45:a2:81:f8:6d:21:da:d3:
a9:48:1f:a2:4c:1d:de:33:aa:51:99:25:48:f9:9a:
82:71:4b:fd:a9:4b:32:01:4d:70:86:f4:5d:29:b8:
68:12:21:ff:8a:a8:38:ab:ce:58:c2:cf:ca:ae:f3:
4f:41:63:25:80:a1:05:8b:71:78:22:2e:17:9a:a4:
8e:0c:22:0d:9f:5d:da:44:03:a6:54:92:51:02:f3:
2a:33:c6:bc:53:57:bf:9e:36:06:57:66:88:2b:70:
a3:1b:04:17:ae:e6:cb:28:97:44:fb:aa:00:19:54:
8d:63:14:ef:7e:55:86:b7:d5:3e:1e:57:e9:f7:a7:
30:0a:b1:f0:95:62:3d:04:51:2e:25:ab:17:3b:c8:
92:fb:77:b2:fe:40:90:34:a4:75:01:9a:0b:30:0e:
49:ba:cb:2c:79:23:4e:95:0c:bb:59:d5:5d:56:92:
23:70:87:11:4d:35:29:af:b6:93:1c:41:2d:7b:67:
8f:5a:3c:b6:4f:b6:fa:40:20:33:22:74:68:26:97:
11:29:78:3f:8f:94:8a:90:18:10:54:e8:2e:b7:a6:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D5:B0:D3:2E:98:51:5F:0D:B5:D3:10:37:9B:4E:73:FC:2F:C7:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d3:d6:a5:32:19:01:6f:1d:97:82:72:45:a3:76:f3:6d:95:
79:f8:b7:f5:10:8a:65:39:4a:06:8f:4f:0e:ef:2f:a9:5d:45:
4c:5c:d8:0c:08:94:cb:78:d7:be:d1:80:0f:5b:c1:df:52:15:
09:b1:88:40:b9:75:ea:a5:14:1a:d1:81:e6:38:d3:a3:e3:6e:
a3:74:27:87:b4:be:80:01:19:0c:dc:3b:b6:d7:24:28:c9:c9:
ef:f4:5b:0a:ec:12:16:19:36:74:51:e0:bd:1a:c5:10:44:77:
5d:89:ae:ce:ce:7e:b7:83:e3:2a:b5:37:0b:96:28:3e:a0:85:
c8:6e:61:81:8b:12:3b:e6:6d:a3:39:bd:1d:bf:52:eb:a2:b5:
56:60:9c:8a:f0:b2:af:e3:34:21:fe:83:b8:13:87:4f:b1:89:
f7:47:94:dc:1b:3a:22:2c:0b:25:cb:de:0b:ea:cd:06:36:1f:
55:c9:71:e6:0e:be:4f:8f:fb:0f:1e:0e:13:4e:6d:0a:44:19:
7a:79:c8:91:2e:44:ac:be:cc:02:72:4a:3f:5e:76:1c:db:b1:
e4:f4:54:2e:16:f8:8e:06:ca:f1:48:f5:09:c6:50:f4:62:34:
6f:c4:56:cb:85:ea:a1:54:b8:18:23:7a:37:43:9f:bc:e4:f1:
99:84:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:15 2025 by rpki-client