Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
File: 4de99023-4420-3dea-891c-b23712defbf9.roa (raw, json)
Hash identifier: D4zbc8UmJ+xfZWxLDcBZQlAvAi3pjogyGKNAIeNlPSs=
Subject key identifier: 08:EE:78:DD:ED:9C:66:4D:A6:CA:E7:5D:2E:EC:A3:29:6F:92:50:7B
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858487CEB251FB2C670E08AF82F00
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 23154
IP address blocks: 148.164.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:25:1f:b2:c6:70:e0:8a:f8:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=859ded8d-578b-4d6d-a3fc-801eda12a8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e3:1f:04:ad:0d:4f:b9:c4:1e:6a:c1:c3:8b:
7d:7a:70:5a:26:2e:00:47:29:d2:b7:56:05:18:52:
5d:8a:91:a8:75:16:97:7b:22:72:99:8b:a3:ed:ef:
de:b2:af:04:98:b2:ae:78:96:24:d6:ac:5f:ec:7e:
5b:fe:01:00:9a:51:6a:0f:4f:c4:5a:18:82:aa:bb:
26:55:1d:24:8b:6f:ef:f2:8a:7f:35:00:36:7d:13:
67:78:66:8a:63:42:70:46:50:65:44:cb:16:24:ac:
24:a5:93:4c:92:b6:d5:62:92:1e:df:0f:c5:7f:ab:
a6:34:1d:20:d6:3f:10:00:6b:55:45:6f:19:6e:61:
b8:8f:84:49:c4:1d:bc:bf:98:79:48:70:c3:f2:2b:
c3:32:f1:3b:d9:ba:3f:cd:a5:20:c5:28:a2:82:03:
f9:0c:4a:69:13:35:c8:e2:68:4b:b7:ea:88:7d:b0:
50:8d:21:9d:13:dc:65:4a:4a:5e:d1:a2:2b:d1:96:
e1:1f:bf:4b:b3:49:53:b7:1f:59:e0:88:0e:6f:6f:
91:ef:c9:cb:f2:3f:fb:7d:09:7e:96:1d:2f:71:f5:
c3:18:91:39:7f:85:d4:cf:5a:c9:6a:7e:11:88:81:
0f:36:85:7b:fa:eb:3a:e4:0e:e6:04:cb:f1:63:7c:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:78:DD:ED:9C:66:4D:A6:CA:E7:5D:2E:EC:A3:29:6F:92:50:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/4de99023-4420-3dea-891c-b23712defbf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:5a:26:1a:cd:22:9a:38:49:f0:21:95:4a:3d:f1:a0:5c:74:
96:09:ee:dc:4a:dd:6c:23:a8:72:9e:ba:ad:e0:27:dc:c0:60:
99:b6:38:b6:85:ff:dd:0e:6f:54:6d:fe:d2:c4:27:2b:d8:82:
92:e2:38:1d:82:e7:76:58:f5:66:ca:60:4e:15:b8:42:f2:c1:
01:e4:af:80:1e:38:a4:14:4b:e7:7d:ab:da:39:9a:1d:01:8d:
fc:10:2e:44:27:16:38:ed:0a:4f:19:af:2c:77:11:47:08:8a:
c7:b1:d8:f5:13:4c:bb:c7:26:4f:8c:e9:e6:ca:6d:5d:a6:aa:
51:c1:dc:d0:1f:5a:2a:a6:8f:46:dd:96:97:46:12:64:82:d8:
0d:34:86:7b:87:d1:b6:d1:8a:36:d1:be:09:a7:5c:08:4d:0f:
67:0d:a9:05:61:34:08:1c:f9:eb:7d:48:cf:53:33:8b:cc:43:
e1:1a:49:8f:b7:3a:cf:c2:b0:2c:c4:7d:75:ca:72:8a:db:e5:
93:ae:6e:20:c0:74:45:c2:60:9e:b9:d0:94:57:67:1a:ad:b0:
d8:e9:ef:22:f8:de:bc:47:cb:d3:51:9d:09:2f:33:70:1a:5c:
1e:35:cd:84:ac:b1:0a:60:f2:30:25:ee:26:db:5f:e5:15:73:
7d:5e:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:44 2025 by rpki-client