Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa
File: 8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa (raw, json)
Hash identifier: WAsFy0Ztq2xbSUwwUe7w36auiEWFiRRKC1IwE6/Kaow=
Subject key identifier: FB:F0:B9:3B:B5:EC:73:B5:56:7A:70:0B:11:64:8C:06:54:79:9F:FB
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695B7BE96A63D50C6068CB0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b7:be:96:a6:3d:50:c6:06:8c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=a5a80bd5-b728-42ba-ba42-eb5fa5d59972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:86:13:cb:fe:17:a4:41:b8:cb:b2:7a:44:
f6:1c:6e:0d:f4:bd:35:a9:8b:63:39:f0:25:33:27:
e0:39:f5:26:2a:9a:e3:82:64:e1:da:f9:c0:85:af:
16:a1:cf:54:b4:11:7e:29:ea:83:2f:e5:52:a4:a7:
7d:ca:54:72:c5:f0:fa:86:12:12:f7:c7:64:cb:7f:
97:f1:85:b3:02:d4:85:68:3c:bb:4a:40:b3:99:6d:
83:e3:be:21:c8:f9:05:32:e5:35:a2:67:db:42:d2:
e7:6e:77:2e:b0:f4:11:4f:ff:3e:96:bb:ce:c9:86:
ce:ba:fb:2e:79:39:f8:b3:22:03:14:3a:cf:c9:94:
4a:03:c3:23:05:b8:36:22:bc:e0:80:cb:eb:6b:e9:
cc:7d:0b:97:e3:8b:c9:1d:02:d4:ff:27:2e:7f:dd:
93:a5:81:ab:a1:ad:e7:cf:ef:38:2b:53:4c:3f:97:
77:cd:4c:c9:f4:31:44:cf:ae:a0:bf:c8:c6:f9:10:
34:a6:bf:c7:0a:6f:cb:27:74:c5:26:aa:be:71:8b:
ce:44:74:a1:e4:e1:f1:81:35:3c:2d:26:d0:66:f4:
97:c2:19:69:ef:a8:75:44:84:ff:94:da:78:8a:f1:
8d:ee:e1:3b:66:75:3f:7d:09:4f:2b:c2:f3:de:e5:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F0:B9:3B:B5:EC:73:B5:56:7A:70:0B:11:64:8C:06:54:79:9F:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:c7:d2:65:ce:09:e2:89:d2:3c:9d:80:d6:92:ef:6f:ee:35:
61:3c:be:e7:f2:28:6d:d4:da:d4:04:ca:db:e1:fa:74:cc:fa:
4d:a8:e6:ec:2b:d5:9a:8b:79:e2:d5:b4:06:b8:ba:40:d5:c7:
ec:f8:81:42:b5:a5:92:0c:1c:64:14:26:c3:1f:ca:03:5d:52:
82:9b:09:de:4d:74:26:4c:64:d1:81:7b:7f:78:d4:16:19:40:
05:fb:a0:19:52:a4:60:6d:49:fc:39:c1:0b:55:9b:e9:ef:ad:
db:b1:97:f9:9b:37:47:a4:e2:4a:6f:b5:17:e0:5a:68:5a:20:
9d:a6:81:bd:10:45:61:56:ea:e7:32:fa:0c:8b:a9:e1:4d:64:
a4:f7:7b:e4:6c:ac:c8:83:e6:c2:55:11:9a:68:95:76:f9:13:
94:ae:0a:5b:c8:4e:86:64:72:e3:52:31:d4:ea:c6:ba:02:4a:
a2:0f:98:f7:1b:65:43:8b:8e:11:d6:fe:0c:73:25:a7:3e:31:
de:48:bf:d5:fc:9d:ac:b2:af:ed:01:c6:bd:a8:a4:1f:c6:ea:
de:d6:95:b2:37:19:c2:0c:42:9b:8d:5d:76:11:5f:97:db:d9:
ce:d6:de:e6:91:75:48:2f:eb:5b:f5:64:d6:f7:24:e8:82:27:
1b:fb:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:34:22 2025 by rpki-client