Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
File: f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa (raw, json)
Hash identifier: QaL45fm2ChggUmZUFycjkxVOAWAoKxRYvrxh7dF4qJM=
Subject key identifier: 28:C0:00:62:C7:D6:8E:A6:2B:63:73:7D:8C:A8:9C:47:E7:F3:D9:3F
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F43285848FBF12770A72F814A0E5A7980
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 398101
IP address blocks: 148.72.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:27:70:a7:2f:81:4a:0e:5a:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=30d23b9c-6fbf-4437-92e3-76c1594db5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:71:57:04:ed:57:79:88:77:fc:11:6f:89:
61:fd:01:a1:af:06:3f:b5:2e:07:be:e3:9a:4f:5c:
fa:9b:f7:5a:57:97:0e:8b:82:96:64:4c:94:9e:3a:
16:e5:92:c4:0d:24:ff:04:fc:7b:ee:6f:80:3f:48:
b8:79:5e:5f:16:b4:50:67:31:8e:e5:05:6d:97:b2:
81:ee:45:7a:d5:51:5d:a6:2a:4b:3f:24:f7:6d:aa:
9d:f8:58:6e:58:d4:c2:40:c2:8e:99:27:a6:f4:a2:
b8:34:18:59:83:0b:9f:ca:17:ec:7a:c1:74:50:75:
d4:e1:df:ba:54:90:d9:99:98:02:50:fb:48:b4:53:
33:07:79:4b:d8:e0:fd:2b:74:99:53:1c:9e:46:dd:
60:38:7e:1a:eb:bf:f0:19:d0:c9:41:09:31:3c:43:
61:1e:86:e6:71:81:40:3f:cd:f2:1a:70:5e:0c:86:
9d:fb:63:8a:2d:06:c5:e7:9c:63:e3:e0:4b:c1:73:
ac:9f:69:9e:f4:01:8f:8d:ab:ad:45:9b:f5:30:c7:
99:12:0a:94:8b:b2:60:1e:24:da:25:46:b2:01:10:
cc:d9:68:d6:50:e0:92:b5:8a:cb:5c:76:28:e9:30:
31:32:0d:2a:63:45:fe:28:48:9d:a7:12:30:89:e8:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:00:62:C7:D6:8E:A6:2B:63:73:7D:8C:A8:9C:47:E7:F3:D9:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
148.72.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:be:5a:50:7a:ed:72:03:6c:08:25:2b:5d:07:04:ac:ea:b0:
a8:ee:a6:0e:a0:84:48:89:7b:2c:8e:ba:ba:22:c8:c4:15:fe:
0f:49:60:b8:b1:3a:16:b1:4f:9a:68:c8:13:7c:90:42:65:a1:
f7:41:17:e4:85:d8:3d:15:5a:b6:48:06:ce:70:37:1a:11:14:
c9:ad:69:1b:d5:1d:6e:55:6f:19:4b:b4:be:c5:e5:ed:12:d6:
44:af:e5:ab:4b:3b:af:2f:d5:a2:61:e8:47:fa:04:00:fa:56:
78:1c:4b:08:fa:26:b7:5d:c2:bf:df:f9:b8:c1:8e:b5:50:b0:
be:ad:5a:a2:78:77:0d:8f:32:23:06:fb:41:ee:0c:a3:78:05:
f8:e6:93:a1:11:52:43:09:f3:76:72:29:33:99:c4:c2:20:bd:
e1:ab:fb:e6:63:8c:b2:52:f5:50:19:ad:cc:55:09:2a:a9:4b:
ef:2b:c1:2a:c3:81:0b:65:75:11:dd:41:32:f4:a1:02:f1:66:
f2:93:4d:2d:64:65:9e:51:60:f4:7b:8a:ba:76:77:5f:78:96:
be:35:92:f2:de:f3:e1:b9:aa:b9:ce:93:d3:d8:34:e1:e8:bf:
84:6e:d3:2f:23:16:57:e0:44:2a:cc:51:cd:b3:0b:8a:10:1d:
88:5f:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:34 2025 by rpki-client