Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa
File: e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa (raw, json)
Hash identifier: e6LMwYXOF9FdieUJMKvlRcG64Un7xPGTssUFkjwg+k8=
Subject key identifier: B4:70:DD:EC:61:B9:A5:94:1B:78:5C:2C:3D:79:4D:D7:A0:D6:F3:2C
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695AFDC5A4C36BDE12DA980
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.0.0/23 maxlen: 23
148.164.0.0/24 maxlen: 24
148.164.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:af:dc:5a:4c:36:bd:e1:2d:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=80e80c1e-3cf6-4fff-8c05-3c146e428111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:0b:0e:0a:b7:48:a7:58:8a:9c:32:0a:db:
99:86:c3:06:e5:13:c9:8e:cc:88:9c:f9:8b:18:83:
39:d2:ed:17:78:15:08:ee:4b:ca:75:0f:e2:71:0c:
50:66:a4:06:0b:9b:04:f7:83:d1:17:db:a0:11:96:
b6:72:2b:cf:ca:b5:0b:72:1a:0f:e5:55:f0:34:25:
d4:76:26:fa:98:a3:1e:29:aa:cb:de:b1:b1:60:bc:
1c:a4:40:ff:82:7d:0c:89:a8:a5:8b:7e:e1:a2:88:
7e:5d:da:92:9c:5c:85:4d:16:1b:ac:fd:45:01:2f:
44:a0:38:61:5d:7d:d5:d0:35:bf:a1:8e:9c:e7:1c:
0c:67:c2:98:3b:c4:b7:f7:77:e2:6d:96:44:79:36:
f6:1e:f6:8b:69:6d:10:6b:48:b9:0e:3b:9f:04:2d:
2e:ce:9f:9e:b4:82:61:cd:f1:59:3c:b6:0a:ac:29:
32:5f:96:ce:6f:92:5b:98:10:78:83:5f:74:44:f1:
42:83:bf:89:1e:3b:4d:ef:f1:66:6d:b0:0c:7d:1e:
d8:71:ff:90:64:64:8b:15:0c:3d:fb:cf:ca:6d:67:
c0:d4:64:8c:5a:a9:c8:aa:20:13:bc:c5:aa:b3:7f:
97:44:d5:c1:dc:ed:ec:3e:28:48:bc:d9:b1:73:40:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:DD:EC:61:B9:A5:94:1B:78:5C:2C:3D:79:4D:D7:A0:D6:F3:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:71:87:4d:e8:47:6b:12:01:c1:0f:7e:04:37:c8:43:ac:19:
41:e0:c7:62:59:be:79:26:d4:74:b5:9d:6e:87:70:ee:17:53:
29:e8:50:10:e1:6b:fb:87:6b:d1:7e:e8:68:ac:80:be:bf:6d:
0e:e1:92:50:bc:2d:45:74:f6:bd:f4:b7:3f:e0:05:d4:b9:5b:
83:9f:1e:ce:24:0f:7b:a3:d2:ad:15:02:41:d1:a0:d5:34:1c:
24:12:fd:79:cf:df:71:eb:a6:7b:e9:cd:32:5f:4c:a1:d6:ab:
89:1f:96:0b:07:9b:70:39:68:34:ba:42:97:16:de:b4:3d:74:
14:08:da:44:cc:06:ad:77:21:5d:a8:81:28:95:83:2e:f0:9f:
14:93:e3:39:dd:7a:ae:46:14:51:2f:cf:2d:0c:ba:0a:eb:21:
00:c5:92:7e:e9:87:03:44:ee:b8:ed:a6:f2:fb:5b:f7:e7:e2:
69:f3:03:0c:e8:00:34:0a:9f:2b:a0:60:04:ea:26:1b:94:85:
92:a3:82:62:14:53:99:d9:ba:c3:34:9b:b6:68:88:8b:e0:5c:
da:b9:7a:20:fa:6c:d3:7f:4c:6f:23:eb:c2:33:8c:54:c2:04:
db:a7:65:d2:97:42:62:20:54:12:a3:f7:37:6d:b2:0c:ad:59:
df:75:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:34:50 2025 by rpki-client