Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa
File: adf36c37-4768-388e-a580-48e9d862ff18.roa (raw, json)
Hash identifier: E2pnxUhJyFK8rHseR/MDBG/MIh+oIvKeUR7tzKmbSc0=
Subject key identifier: DF:6F:38:07:C0:46:60:41:13:36:12:48:A6:13:B7:70:B1:38:A1:E6
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848FD56BC5EC407EB64A25A5480
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 148.59.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:bc:5e:c4:07:eb:64:a2:5a:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=ca0ef42d-20d0-4f6a-9521-72b265c0d766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:f0:77:7b:6a:88:a0:8a:08:2d:0b:6e:e4:
c5:a4:4f:26:ba:60:f5:83:73:4c:63:a4:47:d5:21:
e6:cc:cb:e1:01:7b:63:a3:7a:93:d2:f9:c4:22:c1:
8c:25:ee:69:54:e1:c0:6d:9e:df:e5:ad:09:cc:9c:
2e:6d:09:5b:d4:38:bd:6f:22:f9:0d:8b:9e:88:d1:
70:2d:8e:31:03:3a:df:12:ea:eb:c2:fc:ad:7e:6b:
e1:b6:81:8b:9a:ba:20:ac:59:a0:2b:1f:92:fb:06:
50:46:ab:80:35:ba:4f:6c:0c:7e:7b:01:72:ef:d6:
f9:76:79:44:fd:28:7e:bf:85:d4:fd:3b:14:98:32:
a6:eb:14:de:42:0c:d1:04:d2:d0:85:90:94:ff:96:
59:46:05:a4:29:ac:6d:c5:e7:33:c0:ea:2b:30:26:
17:29:a8:93:c7:e1:72:c5:95:c3:c5:6f:63:25:c2:
6a:1b:a3:f0:d0:cd:24:f8:2d:71:15:42:14:ba:13:
60:04:95:fd:78:02:51:81:f5:2f:41:df:38:37:f7:
fb:b7:a8:7e:88:11:11:69:3f:4a:49:c9:03:aa:ca:
1f:b1:11:65:a9:35:c9:ec:70:e7:74:27:d3:fc:01:
ba:6c:c7:0f:c5:38:dc:92:8d:57:7f:5a:9a:0d:e6:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6F:38:07:C0:46:60:41:13:36:12:48:A6:13:B7:70:B1:38:A1:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:98:97:fc:c1:d1:9a:ca:0b:7b:1d:f6:01:5f:a5:c2:c1:6d:
13:fe:3c:1e:0d:a6:98:b9:96:a0:18:29:84:48:fc:af:a4:b0:
d0:50:2c:87:a5:8b:57:dc:73:9d:98:b5:bc:57:22:28:96:cb:
2b:cc:72:58:bf:2e:5b:7e:87:f8:70:2b:f8:e7:73:cd:a7:ca:
e7:8a:36:44:d7:79:20:b1:c1:26:48:5f:18:c8:6d:d4:b9:a9:
03:ef:49:7b:ec:00:b5:c0:8e:05:d5:bf:83:90:e6:13:80:a0:
3e:d8:00:7c:21:1a:3b:4c:c4:2c:de:64:be:63:49:4f:fa:d5:
ac:95:d1:85:e0:58:c4:7d:3a:df:3d:55:e3:23:10:54:b1:50:
1c:0a:b8:f6:85:cd:18:b0:d4:dc:92:63:12:9b:06:98:77:d1:
14:f2:36:df:e7:be:ce:e8:e5:a8:fc:aa:a8:4d:58:df:96:9b:
a6:d1:6e:bf:6c:68:80:53:5a:99:48:57:b3:49:9c:f2:e4:8e:
09:91:48:69:53:10:df:a3:e4:86:dc:90:c9:7e:17:bf:34:72:
09:43:fb:f5:cb:c2:d8:e1:43:1f:b2:ca:ec:a1:b9:a6:4f:cd:
a8:ff:c0:c2:2b:e5:e1:a5:bc:b3:f3:41:45:87:e9:fd:ce:61:
5a:53:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:47:07 2025 by rpki-client