Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/a0e8c405-f477-3afa-9c77-172d906ba200.roa
File: a0e8c405-f477-3afa-9c77-172d906ba200.roa (raw, json)
Hash identifier: aw+AEtJA4RbX/f0xcNyczrmUOej4a79mGnvgGpeO0qI=
Subject key identifier: DB:76:9E:58:60:96:05:3D:8A:AF:89:06:29:1C:97:53:DB:43:59:C6
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695B725306FA64856F53C40
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/a0e8c405-f477-3afa-9c77-172d906ba200.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b7:25:30:6f:a6:48:56:f5:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=551f7006-a997-42f7-ac30-d7ce13a2ffc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:35:f0:a2:e0:a9:fc:8a:3c:68:b2:dc:b4:
44:dd:9e:1a:87:d0:11:8a:67:6a:3c:6c:43:a8:40:
3c:84:9b:b4:6b:a1:f6:e9:84:35:3a:3d:32:46:d0:
c8:24:7b:a9:89:5d:68:00:a2:5e:35:50:84:ba:e0:
e2:82:61:27:ed:85:93:62:20:8f:8f:80:50:3d:89:
84:dc:e9:1a:de:2c:be:eb:75:c5:35:d0:d8:4a:48:
be:b7:b8:95:e3:a3:7b:a6:ff:88:a1:23:73:28:5e:
39:ef:20:bc:4f:6e:af:b3:f6:cb:08:5a:8a:1d:5b:
3f:87:59:78:91:c0:90:d9:1d:07:e4:71:90:59:1d:
cc:7d:19:de:3d:26:e5:5d:2c:17:1b:1c:48:4a:74:
74:9b:ee:72:d3:df:f0:57:ae:c2:b3:5d:57:e3:cc:
c3:dd:18:9d:eb:2d:d9:e3:74:12:20:59:53:ee:c5:
fc:5a:ac:a8:15:3e:7f:4a:8e:1a:ad:5c:b1:f6:3c:
1b:31:3e:22:83:77:32:d3:27:6b:3b:4b:f9:f9:bf:
71:1a:96:1a:9c:2b:f5:b9:e6:6f:f1:c7:1e:5a:30:
63:29:c5:08:27:7d:4f:b3:51:5e:14:6d:cc:27:39:
02:22:90:d7:39:b4:79:ed:c3:ee:27:a7:9f:53:38:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:9E:58:60:96:05:3D:8A:AF:89:06:29:1C:97:53:DB:43:59:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/a0e8c405-f477-3afa-9c77-172d906ba200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f6:9b:ed:d2:18:ab:9d:d5:15:4e:89:0b:16:a3:ef:11:95:
d4:2a:3a:19:3f:b8:a8:7b:49:1c:8d:6a:15:2c:c4:15:3d:ae:
91:70:fc:b7:6d:cc:10:2d:6d:a4:3d:76:ad:f2:54:3a:fb:b9:
a9:b4:f7:b6:70:53:e4:d2:f0:a6:d5:35:fa:3b:0b:82:7e:58:
19:c9:3a:23:62:64:76:bf:c3:a8:6f:8e:b3:58:1e:e8:cf:bf:
ca:cb:99:c7:00:ad:fa:4b:13:eb:86:79:f4:41:fb:a2:3b:87:
cc:dd:db:ff:28:a0:cb:be:0a:44:00:55:01:ce:d1:a8:3c:2a:
2b:44:0e:3a:cd:26:54:28:11:d9:1d:74:5e:19:fe:e7:61:c2:
3e:b0:6b:b1:b1:68:7f:c8:af:4b:f4:03:0b:72:b4:55:6b:f7:
45:24:d4:16:33:6e:a2:12:21:99:33:bf:ef:59:c5:9e:58:0e:
35:f4:22:ab:98:ac:a7:60:d1:9e:6f:e7:e6:25:40:45:03:fd:
ce:e5:28:50:42:bc:16:8c:62:2a:ab:8d:ac:62:86:c5:00:0c:
ae:2d:bd:42:17:49:bf:cd:42:70:f4:fa:ac:13:3d:3e:18:d3:
59:cc:b1:9f:17:cd:e3:75:ba:42:12:0a:67:c7:68:d9:91:6e:
0f:1b:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:44 2025 by rpki-client