Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/126dea5b-8d30-3b56-906f-ec0104026eca.roa
File: 126dea5b-8d30-3b56-906f-ec0104026eca.roa (raw, json)
Hash identifier: 2sqt0FxznLMvs8DK/EUva8ob6XKGFL16LtEzRe837sw=
Subject key identifier: 23:20:FE:0F:77:5F:B0:35:20:33:4C:6F:CE:B1:DF:BA:3D:C1:BB:C7
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695B71712CEAB40880C4D7C
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/126dea5b-8d30-3b56-906f-ec0104026eca.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b7:17:12:ce:ab:40:88:0c:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=4a1ae137-0bab-482b-b36a-01fe9aaabec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:14:5e:c9:1c:8b:26:12:70:bc:c1:06:5f:
1f:36:57:de:16:56:7e:64:ba:80:e1:19:c4:94:9a:
19:7a:cd:4f:b3:80:c7:2b:af:49:d4:39:fc:50:28:
54:61:7e:6a:27:8a:c4:aa:65:7e:04:63:ee:ba:23:
9c:88:32:33:c3:e1:93:56:aa:86:a5:1c:79:e0:2d:
dc:36:ed:3c:83:25:bb:be:46:9d:19:1b:b3:3b:c5:
05:07:af:bf:ab:0b:03:ad:34:90:ba:17:1c:dd:39:
4d:56:88:44:51:20:a7:49:37:72:31:e5:84:46:02:
a9:54:09:f5:8f:59:c1:84:d9:0a:ad:66:2a:23:6e:
30:c6:df:f5:ae:21:cc:c4:41:3f:8c:e6:2d:b7:e7:
fa:d2:9c:5c:54:4d:5a:a3:59:00:6d:15:ac:76:61:
00:69:71:c4:a4:12:40:87:5f:c2:5d:41:24:59:2b:
f1:c2:64:d1:4d:92:84:0c:d0:98:0c:36:3a:eb:73:
5e:3e:14:fe:b1:66:25:8d:7e:85:63:10:d4:ff:c6:
7d:1d:01:cc:00:51:d1:92:db:4e:b4:ef:fd:13:67:
15:ab:ac:4b:94:24:76:83:40:cc:b5:a6:7c:7a:e2:
fc:1b:e3:66:e1:49:c5:ad:f8:d7:76:13:83:74:9d:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:FE:0F:77:5F:B0:35:20:33:4C:6F:CE:B1:DF:BA:3D:C1:BB:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/126dea5b-8d30-3b56-906f-ec0104026eca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:3c:ef:06:33:9e:2d:36:4d:1b:4d:5c:ac:ec:28:29:fd:f9:
cf:40:c1:26:66:4d:f5:ff:e3:00:cf:81:39:e4:ae:ec:ba:88:
e8:43:6c:96:c4:a8:5b:4a:b0:89:05:ee:8e:8b:7c:26:12:ae:
28:41:23:a1:bf:d4:72:ae:73:7b:5d:56:01:59:f6:1a:35:73:
c6:01:5b:40:19:9f:42:33:1f:57:ea:62:0e:7e:aa:57:87:2e:
d7:dd:0d:48:01:d4:a2:dc:ae:2b:ea:7c:d9:ac:c2:77:b6:38:
7d:f0:8d:9c:52:f5:1b:d7:7e:4f:4c:5c:88:35:2d:18:70:10:
7e:94:a7:67:9b:64:64:54:f1:10:da:4d:a1:ca:40:d5:59:46:
7e:9c:26:a4:29:15:c8:fd:30:db:67:c9:a3:28:ca:ee:cb:d6:
40:5d:62:71:e3:c1:97:a9:76:13:88:67:60:55:d4:1d:06:2a:
04:fa:90:d7:a1:04:06:aa:c3:97:5b:3a:b5:f0:55:3e:4c:c0:
4b:7f:f5:7e:40:45:24:29:f2:56:c2:53:ad:3b:58:78:b6:4e:
5a:73:85:14:c1:7e:5d:21:21:e8:07:d4:f3:4d:cc:35:ca:0d:
6b:0e:6e:5f:50:f3:dc:d4:d6:ea:ad:83:e8:73:d4:1f:ae:66:
8c:3a:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:44 2025 by rpki-client