Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb0e770a-f4ab-3f77-9bb2-a6f0ce48b76f.roa
File: eb0e770a-f4ab-3f77-9bb2-a6f0ce48b76f.roa (raw, json)
Hash identifier: Q+Jk5FSmCy6r4gRntv4OI6ZhN0Ps8ZxQTWMZZxzMumg=
Subject key identifier: D6:04:F8:CF:90:03:6A:DD:70:1D:0C:50:09:D1:B5:12:E1:E3:E5:A0
Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial: 010D0C9F4328584902EC250FE142D31F5B0DE420
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb0e770a-f4ab-3f77-9bb2-a6f0ce48b76f.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 13845
IP address blocks: 148.66.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:25:0f:e1:42:d3:1f:5b:0d:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=391aee4c-7a3f-433f-abd4-a73a98f83d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:0e:63:02:fa:42:e6:fd:f9:d9:43:e3:17:
c4:dd:b7:bc:21:eb:1d:85:d9:13:d1:e3:ea:03:10:
b1:25:8e:8e:1a:c7:27:88:81:d6:f6:3b:85:28:04:
de:1c:7f:7d:28:ff:84:6d:3f:a1:a9:31:0f:a4:02:
21:83:b0:e6:d0:52:df:63:e6:0b:66:86:ed:90:7c:
67:a7:54:0c:8f:a6:ec:35:64:4c:27:a3:22:7f:9a:
f0:05:8c:67:b3:e4:70:90:bd:be:4d:1e:88:b1:4a:
fa:1b:b8:dd:bc:18:4d:b9:f4:23:d7:58:62:6a:26:
d7:69:6f:ca:e9:cb:c5:7d:74:24:62:bc:b1:eb:4e:
4d:ef:cc:bc:c4:74:16:0e:3d:a6:28:63:b7:5f:41:
89:4a:96:bb:01:1d:52:74:14:49:c6:05:c9:db:94:
aa:52:ec:19:21:87:91:ac:d3:77:4e:62:c6:6f:16:
51:64:c8:5a:0b:88:5f:6e:d7:fe:aa:ac:f4:4d:cd:
75:0d:be:74:65:80:24:a5:bc:58:23:78:c0:ba:8f:
19:38:02:39:93:1b:03:fb:0e:f0:1d:ec:ef:85:64:
63:95:df:19:57:b1:48:af:f1:9f:0e:a9:d1:0b:9c:
8f:bc:21:b9:8c:01:ce:2e:02:f2:01:47:c0:8a:7b:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:04:F8:CF:90:03:6A:DD:70:1D:0C:50:09:D1:B5:12:E1:E3:E5:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb0e770a-f4ab-3f77-9bb2-a6f0ce48b76f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
X509v3 Authority Key Identifier:
keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
sbgp-ipAddrBlock: critical
IPv4:
148.66.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:98:08:96:6f:b8:09:4a:21:8f:ae:9f:4f:f2:52:c1:7c:1a:
e5:1a:36:8b:95:1f:22:49:43:6c:d2:65:6d:9e:f0:47:26:0c:
7f:21:1e:91:46:79:04:91:e0:f0:f3:eb:ce:83:15:7f:37:67:
0e:5e:05:b0:b4:5a:e8:ba:8b:f6:f4:c1:47:7f:a4:a9:eb:74:
4b:d3:cc:8d:93:bb:9c:9b:07:3d:22:ae:1d:53:bd:47:ce:ff:
ad:4d:7e:2f:b5:56:1b:f6:cb:74:4c:12:bc:18:a5:79:d6:5f:
43:0a:c5:c0:25:0d:b6:58:ca:87:dd:47:82:25:c7:2b:53:1c:
02:42:b1:bd:13:01:f9:da:2f:80:b4:17:d8:71:1a:48:7c:88:
eb:87:95:8b:94:3f:bb:b9:c9:4a:e7:e5:a4:23:fb:85:5e:b9:
3b:46:b2:5f:db:20:38:bb:d8:d4:b8:da:76:50:71:f4:bd:b5:
a2:32:6b:b2:b9:d7:27:43:5f:cf:b0:4f:7b:87:6a:fb:9c:e2:
2e:c8:09:bf:00:a5:76:b9:41:5c:87:1c:2b:a3:7d:14:5a:b3:
b4:0c:bc:f2:d6:52:09:94:b1:b6:3b:87:33:5d:f0:fe:82:f1:
11:35:ea:ca:a2:bd:ee:5f:6a:3f:44:ee:7b:8d:c3:10:08:5a:
25:47:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:51 2025 by rpki-client