Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
File: 5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa (raw, json)
Hash identifier: 4hb6vhtG1H8QQAW+Zs2et/AOLDtnZ4RVlPwiN9gIC7U=
Subject key identifier: 08:78:8A:B8:34:72:F5:8A:8C:AD:D4:5A:94:2D:8E:68:DD:5D:4B:DA
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F43285848EF61488C32EE4055068E3E80
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 1299
IP address blocks: 148.188.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:48:8c:32:ee:40:55:06:8e:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=fdf1ba9a-cfdd-4621-a090-88184027c419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:6d:1c:44:38:73:f7:37:34:f1:42:6c:5d:
3a:c6:82:d9:5c:cc:d6:6a:6e:cc:e0:c8:b9:45:4b:
ef:5e:a5:19:c9:72:af:09:3c:db:f0:08:4e:36:44:
39:be:38:c0:44:5b:23:51:57:00:bb:f0:e1:ea:2f:
33:5d:a3:93:9d:fe:b4:2e:38:6a:d4:1f:3a:81:dc:
16:5e:a4:b6:9b:30:b3:08:71:cd:a6:81:14:45:8e:
f8:8d:e3:c9:44:f3:b8:e3:7d:fd:b0:2b:fc:68:8d:
dd:64:44:6d:f1:0d:89:95:6e:27:8e:94:7b:f1:07:
1d:c4:15:a4:a3:bc:a3:fe:86:9d:4d:1f:9e:b3:c1:
dc:b0:af:ca:60:ce:34:cf:b4:0a:3e:e2:7c:66:56:
16:4b:0a:5f:35:38:32:02:72:b5:1f:65:fc:84:b5:
e9:5a:bf:7c:cf:cc:a0:d1:7e:5a:c7:a2:95:c1:94:
e8:19:ea:4d:b6:9b:ea:f2:82:2d:3d:7f:f1:b9:81:
04:b3:35:a4:6f:9f:75:ca:fe:e0:9a:c6:ee:4f:0b:
09:9d:87:77:28:de:4a:02:41:95:62:6a:84:8b:1c:
82:10:c5:1d:2e:20:2c:0c:7e:f6:d2:9d:1f:a6:af:
4b:6f:03:5f:2b:78:ca:44:e2:8a:fa:1b:fd:62:1f:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:78:8A:B8:34:72:F5:8A:8C:AD:D4:5A:94:2D:8E:68:DD:5D:4B:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:03:a3:5a:40:f8:f6:07:5c:59:cc:04:9a:c5:df:7a:94:07:
bb:04:e9:1b:68:a9:4b:59:e9:5f:86:b8:1e:fd:b4:d8:8d:87:
d5:84:4d:c3:fc:bc:ce:6a:75:f1:e9:e6:a1:f0:5a:dc:ad:d7:
66:70:fe:cd:4f:77:e8:25:b9:c9:f1:f0:21:ff:27:7a:9c:62:
97:4f:99:e6:9f:a8:17:bb:e4:f1:02:d7:9c:eb:24:8b:94:c5:
9c:94:22:48:d7:44:4d:7a:7d:c8:cd:cc:a3:3b:d8:9e:97:65:
2c:a8:7e:f0:77:4a:6d:85:cf:04:6a:e7:57:14:3d:10:dc:00:
a0:18:7b:90:1c:01:67:87:fa:b1:2d:4a:3c:62:88:ea:92:42:
a0:d4:21:15:05:30:70:66:ef:03:87:79:52:78:1b:01:39:e4:
0f:07:dc:4e:97:7b:c9:e2:67:48:52:bc:41:ee:e4:4f:53:be:
1e:91:45:c4:4f:22:e7:6b:a7:40:ef:71:0d:d6:6a:f6:db:4f:
a3:40:5e:24:8c:27:86:2e:08:d2:70:fa:68:2b:01:89:3b:78:
48:c5:4d:84:b6:ec:cc:c2:f5:6c:74:42:e4:89:6a:6a:e5:db:
48:6e:cc:d7:ad:3f:b1:58:47:98:f5:33:d5:f1:a8:ca:05:a1:
d0:37:e3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:40 2025 by rpki-client