Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b77ab64c-d4a2-355c-a1d5-891114144cda.roa
File: b77ab64c-d4a2-355c-a1d5-891114144cda.roa (raw, json)
Hash identifier: tsTtDZPRfvHeDhr5vsXMfzvbG+oidllqI8XFOqxSTOU=
Subject key identifier: C1:97:6A:1E:01:27:51:C4:F9:C1:6F:4B:89:EB:13:8A:72:94:A7:61
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C58176E57D274B515AF090C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b77ab64c-d4a2-355c-a1d5-891114144cda.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 146.148.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:76:e5:7d:27:4b:51:5a:f0:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ab533ad1-1c09-4c76-89bb-878e03212fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ab:ed:fe:e5:ca:dd:fe:a0:01:8b:29:60:c0:
ab:cd:2d:cf:fe:a4:3d:6c:37:61:96:96:54:b5:a7:
0f:51:6a:44:d1:e4:82:d3:03:0b:f1:03:d4:1a:af:
c6:84:db:da:d4:9d:ae:85:60:66:1a:57:04:da:f1:
e4:71:df:39:b2:d3:f9:19:9b:47:e2:44:f6:60:7f:
66:7d:1b:ed:49:23:e2:fd:5b:3b:82:ef:dc:d2:99:
25:fb:67:f8:11:23:ed:fc:5e:cc:f2:a1:f2:b6:df:
b7:9e:83:ba:4f:e6:d4:f5:84:e0:6c:2e:2b:d7:16:
99:e7:d9:f1:65:66:5b:90:2e:65:61:cd:48:62:03:
d8:05:38:4e:5c:3e:9b:fc:0a:d6:a5:b9:21:02:9a:
12:9a:4b:95:ab:2f:a7:60:b5:94:58:06:70:62:78:
c7:1e:f1:fc:13:14:71:6a:fa:62:6d:33:9a:d9:23:
4d:45:cb:dc:49:01:de:f1:2b:9f:30:d6:e8:74:3a:
9a:99:cd:0f:69:a3:2a:71:ed:e2:7c:6d:4b:60:05:
70:68:16:d7:2e:0b:8b:e3:a7:6e:58:e2:0c:73:27:
69:36:f8:85:7b:c1:74:51:a3:36:03:80:9e:34:8d:
93:46:b9:2f:cc:11:f4:7f:48:6c:90:31:2b:2c:36:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:6A:1E:01:27:51:C4:F9:C1:6F:4B:89:EB:13:8A:72:94:A7:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b77ab64c-d4a2-355c-a1d5-891114144cda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
146.148.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:72:8a:86:85:ce:b6:99:94:ba:8f:81:8f:87:51:ca:95:f7:
b0:e1:f3:57:80:4c:de:4f:18:33:37:9f:39:f8:30:9e:cc:a5:
07:65:a7:42:d9:29:c7:eb:31:c8:c6:5f:b7:75:ef:5f:80:a4:
1c:df:01:54:9a:63:d3:ec:e7:97:b4:35:27:84:16:b0:bb:1e:
26:95:a8:09:2a:df:66:7a:8a:4f:72:90:e6:d9:eb:0f:48:ba:
bf:5e:52:b0:e6:4e:f8:79:8e:e5:27:e8:4f:cf:44:5b:72:94:
28:f6:a7:33:7b:d0:19:f8:c1:97:2a:2e:e5:f0:6d:6c:f9:ba:
88:47:1e:7e:00:2e:ac:59:8e:39:0c:de:07:72:c5:31:ed:fe:
68:db:9b:46:86:1e:d9:49:a0:78:2c:f3:d6:91:52:08:f3:98:
31:5c:6e:cc:14:d3:0e:82:fe:f1:72:ef:66:29:6b:be:e9:94:
ec:fb:24:e5:2a:70:4a:ba:07:93:6c:a5:36:d1:ca:52:19:82:
41:a4:87:82:6a:d3:1c:92:51:eb:cc:72:20:2d:3a:ad:78:b4:
d9:3e:00:cb:64:d1:72:db:85:5a:6b:64:fe:30:a5:a8:e2:ed:
47:76:f6:e2:2d:ce:d3:3f:c2:34:c5:65:66:67:a5:5d:ed:2a:
2a:ea:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:59:59 2025 by rpki-client