Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa
File: 8c1d8561-e377-394b-ad52-2f543980d885.roa (raw, json)
Hash identifier: 2NoATdxk0N3kA4Xc9i+rvIqf+l2y7ACw9cRNZDDigHo=
Subject key identifier: 95:BD:91:D9:55:99:8C:23:B2:38:D0:42:CB:47:72:4D:52:BA:A8:C5
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695B0A8BAC7E8BA8913CBC0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.48.0/23 maxlen: 23
148.164.48.0/24 maxlen: 24
148.164.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b0:a8:ba:c7:e8:ba:89:13:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=4f1182be-f618-4370-bd85-55636ab58758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:c8:0e:00:81:a7:54:93:87:6e:dc:24:65:
7c:f7:6c:0e:9d:56:07:56:47:86:6e:95:9c:69:fb:
95:98:a3:ec:92:ae:b3:85:1b:1d:84:66:12:d6:7e:
32:2b:16:0d:83:52:ea:53:4c:e7:77:c1:c8:38:0f:
c5:70:10:46:41:5f:64:e6:13:bc:c3:87:7c:43:6f:
70:f5:74:99:b1:5b:cf:19:eb:3b:15:86:4f:2c:cb:
f9:c7:1a:10:ff:be:33:0f:58:32:d7:b8:e5:ac:ce:
ab:34:c3:a1:1e:67:33:0d:14:d5:61:12:d9:6c:6b:
c9:70:ff:ba:aa:74:00:af:0f:77:14:9f:a6:ce:33:
b3:24:64:3c:6d:77:9f:76:99:2b:0d:ac:39:57:da:
57:3f:a1:bb:75:69:37:fa:aa:97:e4:92:b7:f6:82:
05:3b:43:fa:f5:f2:6d:3b:34:f6:40:a3:3e:fb:2a:
36:44:bc:b9:a8:76:2e:d0:42:2b:0d:d1:84:db:7f:
37:71:b7:47:3c:72:06:9f:c3:82:b3:8d:0f:1d:4a:
3d:04:2d:ea:a5:e8:1c:96:52:e2:1e:be:a0:ae:7e:
2c:5e:b2:f3:16:9c:5b:b2:41:a6:26:bf:0a:d4:41:
a4:f9:11:08:68:86:ba:02:de:f0:4e:36:41:50:48:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BD:91:D9:55:99:8C:23:B2:38:D0:42:CB:47:72:4D:52:BA:A8:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f3:94:18:f6:43:00:3c:6f:d6:ca:d9:8c:5f:52:93:62:37:
e9:e2:48:d1:31:86:ad:d3:98:81:f2:38:91:91:33:0d:e8:12:
70:f1:ec:c1:19:37:3a:fa:79:9f:4d:17:fa:97:62:d8:24:bc:
b1:57:08:fd:ac:03:a9:2b:18:3d:48:03:eb:8f:ec:93:50:5b:
86:f6:34:04:5e:d4:35:99:b7:b5:93:8a:3b:b8:eb:48:2d:88:
69:54:48:10:c1:27:b6:f3:25:de:7f:c3:01:8d:ca:0c:2d:da:
fb:b3:8e:ae:7c:49:0b:e8:c5:47:ac:13:6c:97:29:29:e6:8c:
a0:53:d9:1e:bd:76:a3:5f:d8:0c:59:fa:2d:7e:dc:4c:98:f0:
4f:01:80:76:e1:f8:63:61:60:bb:ac:05:6e:a6:4b:88:cd:b9:
f1:da:b3:33:1d:70:c8:ed:d9:75:a6:6d:bc:a9:81:6a:c0:05:
1f:ba:df:7c:d6:7d:43:54:6c:72:33:3e:5f:24:ca:8e:5a:58:
8a:7a:38:e0:98:7c:ad:42:12:07:6a:a3:c6:10:1d:6c:69:87:
a7:7f:40:f4:a0:19:36:9f:f2:1f:27:b7:49:95:99:5f:11:d5:
5c:9b:9d:ee:03:17:b4:c5:f1:18:9a:b8:6e:8c:fc:1a:89:85:
f4:92:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:36:13 2025 by rpki-client