Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa
File: 3c30150f-dca1-38c3-ad8f-162e173fc54e.roa (raw, json)
Hash identifier: g6gnVYbsQ+3LYhqqdR91qodumCeSKuSciTttRNzeUF8=
Subject key identifier: 8F:BF:62:D4:2B:20:06:FC:38:4D:DC:28:C7:DF:3A:78:66:0D:08:99
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695B77BF20E18835ADC7B00
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.42.0/23 maxlen: 23
148.164.42.0/24 maxlen: 24
148.164.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b7:7b:f2:0e:18:83:5a:dc:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=dadb275f-1fa2-46de-b0fb-c5bec22fefe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:74:cf:bf:14:e7:76:89:c0:c0:7c:df:95:
12:de:76:cc:84:e2:46:a7:40:54:d9:f6:91:59:bf:
ea:78:a9:42:89:87:f8:8c:3b:d4:64:e7:3b:2b:b1:
f4:ad:eb:ce:89:22:64:fd:fe:db:9e:e2:98:82:9e:
a5:41:03:c5:fe:9b:47:38:09:7c:42:f2:18:33:18:
91:e9:a3:84:ca:91:c9:29:09:e2:80:90:55:5c:cf:
e9:b9:45:64:30:6b:42:ff:8e:b2:54:b4:5b:34:8f:
63:88:e9:9c:5d:13:a9:88:e1:79:6b:fb:6b:76:5a:
02:c6:93:26:f8:d3:b1:7f:cc:37:de:70:e0:43:4f:
d2:c5:fd:a3:6b:90:21:c5:c3:0d:49:d8:b5:b4:cc:
01:e2:71:55:a9:7e:bd:53:2d:fc:38:07:aa:83:39:
0e:f9:12:d7:a6:9c:53:d0:15:d1:24:dd:92:82:fb:
d4:c0:63:35:ca:5c:5e:f9:15:7d:a0:58:9b:09:b6:
2a:b0:f9:e9:f7:ba:a7:be:c1:7a:b7:0b:d5:6c:7b:
d4:70:e2:e3:6b:34:ef:b3:84:ea:90:12:4a:be:74:
b3:1e:04:de:43:f9:97:8b:56:df:ed:25:8f:b1:d3:
22:15:24:d1:94:07:06:70:55:11:51:ee:cc:26:1a:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:62:D4:2B:20:06:FC:38:4D:DC:28:C7:DF:3A:78:66:0D:08:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:15:11:54:d6:e4:90:7c:5d:a7:9b:3d:24:3b:d8:ee:28:40:
4e:43:ff:ec:3d:17:b0:0b:a0:cb:d1:0c:7e:d3:2e:75:8b:eb:
d0:e7:80:b7:84:40:4a:9a:35:19:7f:ce:3f:0a:81:ef:cc:0a:
e5:f3:28:e0:0f:8d:3b:52:4f:ca:99:04:5d:63:5c:f8:b3:84:
a3:3c:ff:d6:99:2b:58:1a:a2:ef:09:86:57:17:27:b4:34:ff:
59:a7:74:88:c4:21:ec:64:5d:58:47:d2:63:32:d0:94:7e:d1:
24:ad:45:0f:78:f2:be:6b:4e:a6:ce:ef:64:08:24:c2:7e:9a:
78:ec:70:f4:1a:1b:35:d9:29:85:cc:84:1e:95:77:31:4e:dc:
7e:e7:b3:df:5d:36:8c:a3:8d:03:66:0f:bc:dd:db:0e:10:6b:
ea:15:09:16:cb:28:bd:87:2f:51:ac:07:b3:cc:3e:23:60:cb:
e7:ef:90:ed:87:7d:f5:72:25:36:09:7c:83:6d:93:00:3d:0c:
4d:01:c3:df:fd:2d:e3:a3:15:16:79:26:ea:1f:e5:4c:05:85:
ad:06:3d:be:fa:f9:1c:e1:c4:4a:0f:58:80:6c:af:f7:da:de:
a0:ce:5b:80:4a:f0:f7:0c:b8:bc:b3:aa:1a:14:aa:12:3a:13:
fc:2f:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:40 2025 by rpki-client