Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa
File: 677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa (raw, json)
Hash identifier: 9dU6hrRSZIadjlKFM5apFS9mHXYlYe9KuX0am2EnpdM=
Subject key identifier: 0B:B1:A5:3A:8C:17:50:A2:CE:87:93:BE:C2:7D:CC:03:6A:A8:02:B3
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695B735702983A3BB7CC7E0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b7:35:70:29:83:a3:bb:7c:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=d757619e-fbb5-4c7e-b978-287808ef94d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:7a:e0:56:64:b2:6b:41:97:df:2e:b5:9e:
a9:70:2f:af:c6:02:25:07:97:b9:65:1d:00:d1:f2:
3a:e9:97:56:38:4e:46:2d:e5:b1:90:ca:02:6f:0e:
68:65:53:86:8a:74:dd:9a:6a:d7:52:df:47:6e:ea:
dd:74:4a:84:67:f9:55:57:c5:c2:69:e1:6b:1d:10:
c7:62:43:5a:da:29:bd:de:51:cb:10:6c:ac:82:eb:
7c:52:f0:51:93:50:76:48:c2:70:d8:60:ff:e1:93:
d4:b1:3c:0a:08:d7:6f:18:3c:e7:c6:0b:b6:20:77:
4a:34:26:ab:28:ae:6f:f0:9b:fb:13:bc:aa:3b:25:
7d:fa:09:7c:c3:a5:53:92:ef:87:b8:61:3d:cc:58:
93:4d:e5:0e:cd:16:02:4f:d8:3d:d9:24:f3:36:8c:
f8:3e:c2:a1:af:08:d9:52:41:ac:9a:06:2f:a9:7b:
2b:e8:2d:18:c7:bc:f7:ef:26:90:a4:e0:b1:4b:e6:
c4:79:48:b0:68:75:2e:ce:4b:14:b7:2d:af:6a:1a:
40:51:23:50:fe:94:07:b6:df:6b:c0:a0:4d:d0:65:
20:32:cf:25:fa:91:6b:f1:c7:81:fe:be:c8:81:44:
0b:6a:3a:57:3e:27:b6:b8:93:ee:a7:ea:94:ee:b8:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:A5:3A:8C:17:50:A2:CE:87:93:BE:C2:7D:CC:03:6A:A8:02:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:20:8e:d1:1a:86:5c:74:6d:22:3f:03:7a:3b:48:b5:a7:21:
e1:89:95:14:a9:29:2c:2a:68:71:6c:e1:84:8e:f8:6b:88:1d:
22:0b:56:79:e2:ef:5c:2a:44:4a:e3:8e:e9:6b:6e:2f:0f:e7:
5e:d9:0d:a7:70:20:4d:4b:ea:2d:be:e4:b1:12:2d:ac:c0:8b:
d9:11:1c:6d:93:d7:8d:89:51:02:3f:b7:e1:a8:45:28:ab:80:
16:e4:c8:e3:09:ee:82:7e:05:98:c5:01:1f:7b:a9:09:05:b0:
37:17:91:df:1f:aa:db:25:cf:e2:5e:13:04:d7:49:82:b6:e2:
7a:bf:54:d6:c3:2f:bf:b2:54:f0:06:0d:ce:a2:bc:a1:2b:a2:
44:bb:69:c9:cb:c0:ee:ab:49:f3:5c:a7:b8:79:bc:75:5b:d1:
60:47:77:c6:4a:22:7b:29:25:5b:b0:5f:08:20:65:74:a9:bc:
df:b4:e6:23:0d:60:0e:1e:4a:01:76:18:b4:cf:02:34:95:70:
e5:ca:00:cf:82:77:b4:16:98:8c:82:8b:1c:65:bd:7d:87:af:
1a:9b:89:99:ef:d7:37:8c:c7:a5:fb:5d:2b:b5:d1:11:39:db:
48:e7:ba:00:6f:6a:8c:f3:bb:da:cc:cb:fd:db:fb:b8:da:d9:
d2:ae:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:48 2025 by rpki-client