Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d3414800-dc29-340f-a861-a4846d5c0682.roa
File: d3414800-dc29-340f-a861-a4846d5c0682.roa (raw, json)
Hash identifier: eeV8nX4pv2kdeI2/D1DRaK9z8ADTrz3qNVBCRGxih5o=
Subject key identifier: DC:ED:A8:1E:C1:24:8F:DC:24:CA:B6:E4:69:87:6C:11:05:98:B9:BE
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695B78A0A8BA3E42CB69400
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d3414800-dc29-340f-a861-a4846d5c0682.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b7:8a:0a:8b:a3:e4:2c:b6:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c8e8ae78-c49c-4f47-a5aa-dcaf5bf979a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:51:cd:75:42:03:cd:f1:e6:0e:43:e3:25:
00:7d:ea:89:17:ed:33:ff:cc:5e:e7:24:1d:4f:23:
58:10:b3:08:37:42:80:69:8b:57:d4:02:02:72:75:
10:4d:8b:ae:73:ae:57:eb:4c:2e:3e:0d:c0:2b:b7:
70:96:1a:09:2c:1b:25:bf:59:9e:e0:b6:0e:bb:58:
30:cf:ea:d7:1a:21:43:d3:f6:19:ae:cd:60:ef:66:
6d:5f:cf:dc:81:41:fb:33:56:a1:8a:38:16:2e:29:
0d:f8:26:48:0d:7b:42:15:95:58:6f:ff:ec:24:3e:
aa:4e:8c:7d:f0:17:11:6b:c6:d0:e5:c0:6f:23:89:
b7:49:9a:54:3e:d7:a8:93:e0:4c:05:55:b3:c8:4a:
ab:ea:4b:42:c8:48:33:f8:3a:55:79:41:18:c4:31:
54:b0:81:fc:15:69:ac:07:a0:e2:84:c7:6b:7e:3b:
80:db:85:b1:f1:8f:79:cd:ab:33:46:5a:88:39:b3:
1b:a6:34:6c:0f:b3:d8:89:a6:c8:69:45:2c:13:94:
4c:4d:5d:cf:a3:b4:64:a8:a7:3f:7a:78:2c:92:3f:
f2:29:e2:f7:da:2c:11:b8:3a:1b:28:a0:01:0e:22:
e1:7b:3e:ed:a5:97:d3:63:b2:97:44:cb:3d:37:d4:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:A8:1E:C1:24:8F:DC:24:CA:B6:E4:69:87:6C:11:05:98:B9:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/d3414800-dc29-340f-a861-a4846d5c0682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:0e:0f:89:b9:c9:2c:d0:da:67:9f:ed:9d:0e:ab:0c:04:c1:
56:f3:a6:26:0d:3c:f9:f4:8c:0c:f3:94:c7:be:0a:b9:1c:3e:
cf:70:03:31:5f:5e:1f:ee:73:9d:f1:c7:59:d5:84:45:ac:a3:
b4:43:eb:9e:e8:17:ee:30:9b:be:42:ea:82:48:8f:3d:4e:7e:
a9:7d:58:96:d2:f4:f5:8b:58:93:c0:3b:d7:bd:ec:ed:4e:b2:
c2:b3:42:4d:42:c3:f9:9d:9d:a5:ec:ae:8d:b0:91:1c:ec:12:
16:c8:7c:e8:04:83:54:77:a2:a9:50:ed:d5:b3:d4:2d:50:58:
0a:87:31:91:07:3e:68:91:50:f5:44:62:cd:0d:df:6e:21:a8:
69:85:7d:04:0c:8a:04:25:e2:45:b1:5d:b5:7f:da:c1:5b:69:
d2:97:9a:7d:05:fb:50:b7:29:5b:81:99:2c:88:78:ad:8c:08:
f4:fc:98:70:16:de:82:c4:66:5c:42:6f:48:8b:4b:70:1d:4b:
18:87:71:e4:34:61:97:4f:52:59:c6:09:45:aa:e7:7e:ca:be:
2b:6b:46:db:6f:b7:a4:ca:c8:0f:e5:b4:fd:57:44:54:c4:16:
93:42:56:bd:fc:e4:36:b0:ae:8e:b6:aa:1e:83:59:62:2b:64:
59:61:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:48 2025 by rpki-client