Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/fe7c4442-addc-3ce4-8135-8acde6c9345d.roa
File: fe7c4442-addc-3ce4-8135-8acde6c9345d.roa (raw, json)
Hash identifier: kud5I9z++qD2jF5FJk5ZTWAh5o40axFSr2ONxSbiG+I=
Subject key identifier: 92:88:2D:E9:EA:F4:89:3D:A5:49:3C:9C:37:E9:BD:4F:86:67:3D:0F
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F43285848B8F0BAFAA9971CDB72108980
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/fe7c4442-addc-3ce4-8135-8acde6c9345d.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 15404
IP address blocks: 148.188.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:ba:fa:a9:97:1c:db:72:10:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=48064b4d-57ff-4c1b-b61a-5aff2bbbf461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:8a:54:cb:5a:5f:ce:2a:be:05:8e:2f:83:
cb:b9:33:31:40:4d:de:60:97:2f:3a:58:46:ba:76:
44:c0:a5:ff:69:b5:87:16:8b:3d:69:1e:c6:33:e1:
a4:8c:4e:5c:7f:7c:72:20:14:67:f9:9d:3f:7a:a5:
6f:a6:b0:6d:01:b6:9c:56:a6:a3:72:d0:ee:69:d6:
68:e9:20:64:c4:7f:89:10:8c:fe:25:8d:ab:bf:ab:
18:87:99:67:cc:20:4a:f9:3b:5a:b3:90:90:8e:5c:
b3:0b:f0:9a:4a:27:e7:54:9a:c3:7a:97:ff:b2:83:
5a:d8:00:01:ee:7b:ec:c4:18:fc:f8:08:f6:b2:d9:
c2:f1:f4:fe:89:b8:4e:90:86:01:5d:2d:ae:db:bf:
d2:ab:82:02:55:25:d0:d5:9f:c1:15:62:b6:64:06:
9b:a5:86:a4:a2:0b:79:9b:9b:c2:8e:82:53:67:e1:
9d:6b:dc:8f:f3:9a:f2:1b:28:3a:ef:38:39:70:64:
c8:d7:a8:89:b3:52:1f:2f:39:01:c4:b7:cf:8d:ad:
3c:6d:c8:df:00:26:38:1c:f1:67:f8:69:96:ea:3c:
f6:b6:f8:9e:11:55:61:47:db:8e:8b:03:29:bd:e7:
72:3a:8f:7d:b4:df:1f:1c:7e:43:ca:e5:31:eb:7c:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:2D:E9:EA:F4:89:3D:A5:49:3C:9C:37:E9:BD:4F:86:67:3D:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/fe7c4442-addc-3ce4-8135-8acde6c9345d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:e6:2f:bf:3f:de:08:ce:7e:dc:f4:85:e4:7c:2b:78:7c:5c:
f2:7e:67:a6:99:b0:15:12:7c:d9:dd:d4:af:73:c4:17:40:9b:
b0:8f:8e:2d:91:16:5e:da:ae:82:be:9e:4a:e9:14:84:a5:e6:
d5:91:2f:d5:1a:bb:fb:02:d7:44:ef:da:17:f9:54:88:09:79:
c5:c2:03:fa:7b:f8:54:be:bb:05:83:f7:95:1a:f6:07:ed:a2:
63:41:25:f4:a3:1c:46:56:8a:44:15:f5:79:6b:61:c8:60:1f:
a0:55:fc:ec:24:16:8b:0d:ba:b9:b5:29:7f:01:06:8f:1a:22:
8f:ed:88:a0:cd:38:06:20:9f:d6:72:b2:f5:25:0d:ff:27:17:
bb:2d:99:8a:43:37:3f:a2:fe:a9:78:94:ff:2b:35:8e:95:03:
66:6e:94:cd:3c:79:72:27:9c:35:a8:22:8c:75:6c:b4:71:43:
d5:5a:1e:46:8a:a1:93:e7:3e:26:df:96:f1:7c:d6:00:da:31:
72:b8:79:3d:e9:8e:18:80:01:d8:d8:2f:30:da:5c:10:fe:16:
b7:3b:04:c4:83:08:a9:10:eb:3c:01:be:11:90:56:95:1c:39:
27:e3:b2:fb:db:08:88:03:f5:9f:98:13:99:1e:5f:5a:3c:fd:
1e:e0:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:46 2025 by rpki-client