Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa
File: 4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa (raw, json)
Hash identifier: Fk9hHDowKNUzDzFQKw7f0bRDnq8zJEbfwISO/SiSx2Q=
Subject key identifier: 5B:65:7F:07:D7:2A:6B:AB:01:68:B9:80:0C:11:28:4E:FC:8C:23:61
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F43285849350EAA58E1A61C5312880440
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 36231
IP address blocks: 148.59.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:aa:58:e1:a6:1c:53:12:88:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=b2d38e64-5342-4bc9-b302-a64e6ed072a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:a3:36:d1:60:c7:59:ea:7b:0e:bf:1c:e0:
38:88:ec:3f:53:13:eb:99:e4:dd:64:6c:70:ef:8c:
b1:21:1a:54:1d:fd:06:6f:49:5e:ef:91:61:68:85:
de:42:21:11:8f:d2:c1:db:95:68:a0:2b:43:d7:f5:
00:bc:10:b3:f7:6d:79:c8:2a:33:23:a1:b9:4b:67:
57:14:ac:34:86:81:8c:59:82:18:d3:b0:69:72:b3:
f4:85:d1:ac:67:48:47:bb:2b:ad:47:22:c5:16:22:
a4:83:34:78:75:87:84:33:1c:37:31:9b:05:8c:f8:
36:39:fa:45:ef:8d:ae:66:70:d1:86:61:f2:0c:30:
55:ce:05:ba:96:7a:4f:eb:30:00:b3:80:e3:5b:5f:
e4:c3:07:e0:3e:cb:9c:49:74:a4:6c:45:b9:8b:46:
22:15:1f:07:b5:b7:90:09:ee:e1:4c:d6:d6:a6:38:
87:6a:52:b7:c6:5c:2a:6c:46:30:a1:55:03:2a:da:
be:b4:5c:48:c6:53:bd:3f:14:5e:ce:46:db:99:65:
ea:5e:74:61:72:67:97:3f:95:c3:da:c5:8a:2e:0a:
c6:03:e2:35:45:22:9c:7e:8e:c0:d9:e7:cd:86:34:
f6:b8:6f:09:cb:2b:3e:6a:50:e3:11:78:ba:28:a5:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:7F:07:D7:2A:6B:AB:01:68:B9:80:0C:11:28:4E:FC:8C:23:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:f1:7e:29:32:0d:0b:8f:ff:e8:4b:ef:73:81:56:37:d6:11:
1d:bd:a2:04:9d:e5:f9:05:05:ba:a0:ec:f0:29:14:ed:01:00:
b4:4a:cd:6a:85:fa:fd:c2:63:d5:46:58:fd:92:de:b9:d4:8c:
8b:c6:a5:27:a2:fd:fd:a1:8e:78:f5:fe:8f:39:b2:23:ad:36:
53:28:89:23:eb:e4:f8:b6:ce:28:94:9c:93:fb:22:16:66:47:
c2:2e:8f:0c:a6:72:99:d4:c2:98:7e:11:80:7c:af:78:fd:ae:
53:6e:99:bc:fb:1f:11:0a:ca:b2:a6:07:6c:c4:1d:81:5b:40:
64:24:62:59:08:e5:e6:11:18:ae:da:40:80:9a:ee:e0:81:75:
7f:79:e5:71:22:2b:69:ef:e0:62:e5:0c:f8:e3:a8:e7:3c:bc:
dd:79:7c:84:93:54:09:a2:65:a2:b2:b2:2a:de:70:77:7b:ab:
ec:16:ea:e0:c3:cc:71:e1:d6:ad:00:f4:ac:84:49:ae:cd:a9:
55:bd:28:64:0b:9e:b1:96:11:d1:9b:56:08:8b:ca:de:a5:a3:
07:4b:a6:6b:80:ba:7b:03:c6:d0:4a:59:67:6c:a2:a5:82:8d:
53:6a:7f:72:1c:ea:7d:09:b6:bb:8b:9a:f7:dc:98:63:ef:01:
9b:9c:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:43 2025 by rpki-client