Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
File: 3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa (raw, json)
Hash identifier: yHhGrf3+mxjR0F/50c/zRnatlMQmvCY92uGgpEyf7DU=
Subject key identifier: 8A:32:0E:D5:85:E7:5A:1B:FB:04:9F:28:3B:C1:79:2B:78:D4:D8:24
Certificate issuer: /CN=4e534d5e-d592-4f77-b437-24906bd6cceb
Certificate serial: 010D0C9F4328584863CB0C14F063970898C4C400
Authority key identifier: 50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 396982
IP address blocks: 148.80.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0c:14:f0:63:97:08:98:c4:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e534d5e-d592-4f77-b437-24906bd6cceb
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=29f7e8eb-3a48-424d-98dc-7cfae1fa6444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:92:80:74:bf:b2:10:7e:de:06:a1:01:80:
f9:75:a4:ee:c8:48:e8:d3:c9:5b:47:22:fd:29:7d:
78:3f:65:a2:4a:51:06:4e:79:be:b4:80:4a:49:d5:
57:98:4e:4c:1c:87:2d:ad:73:9e:5e:5c:05:22:cb:
f1:7d:94:24:62:de:62:f5:7f:e3:8f:ed:d8:1c:c8:
55:1c:77:58:45:24:fd:32:b5:3f:15:6a:55:55:7a:
c3:e5:18:bd:3a:76:a5:f7:1e:a3:fa:12:2c:df:55:
9c:d8:44:b8:41:bd:b3:d9:f5:e0:92:58:d7:39:51:
57:39:50:51:3a:4f:84:a5:76:60:6e:e7:78:a5:74:
05:d6:b7:d1:dd:68:6f:97:74:ce:43:d4:a0:41:ca:
e8:bf:85:55:03:52:ea:55:eb:b7:21:6d:75:65:32:
52:68:3e:87:b4:88:30:ee:c1:4d:ec:4b:ac:cd:72:
c0:0e:8c:56:9f:4d:bb:c6:a0:0e:e4:00:aa:3c:10:
9e:47:a8:94:14:7b:77:0b:a1:bf:6c:c1:00:f3:65:
17:b3:40:7f:f7:e0:64:1a:08:f9:6e:c7:5a:12:c3:
59:ce:80:dc:1e:5b:52:d1:51:d7:73:8e:eb:50:30:
2e:59:0d:df:12:95:69:48:27:3a:95:ad:0e:01:ed:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:0E:D5:85:E7:5A:1B:FB:04:9F:28:3B:C1:79:2B:78:D4:D8:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl
X509v3 Authority Key Identifier:
keyid:50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
sbgp-ipAddrBlock: critical
IPv4:
148.80.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:36:36:98:83:f5:1b:f9:c2:1b:73:7a:f4:47:82:dd:f0:ff:
a3:f7:42:36:74:33:ae:22:3e:0a:99:8c:d6:41:8f:88:84:6f:
90:f1:3c:c6:16:20:98:00:dc:b3:ae:56:cb:ed:ce:01:b5:b3:
ae:49:d4:a8:c0:cb:c9:6e:9c:67:e0:28:6d:a5:18:94:d9:78:
46:ab:d1:76:4a:cd:1b:f7:04:b6:70:22:bb:de:72:db:e6:d6:
56:65:cd:0f:51:2c:40:59:ea:db:f4:47:96:c5:18:b9:b9:dc:
a9:8a:81:15:4a:85:a4:b9:8d:06:91:84:73:c7:98:ee:78:a0:
68:f5:05:a2:95:9a:ed:83:df:cf:a6:4b:91:d9:b9:2c:ac:47:
cf:55:a4:80:e1:8a:55:18:06:7f:c6:d3:d0:29:05:3b:09:30:
1e:8f:49:04:64:28:da:b2:09:27:1a:26:cd:66:f5:56:71:4f:
02:0d:07:26:c8:82:50:95:97:2f:c5:62:8b:93:40:11:f5:d0:
e1:96:16:1f:ec:29:5a:ff:3f:93:40:2f:7f:f9:68:fd:78:fc:
c8:89:a3:c5:cb:72:18:cc:1c:b5:c4:dd:b7:35:b0:8c:72:cd:
36:c8:66:db:03:ed:c3:e7:d1:41:c8:9e:48:98:ab:5d:8d:75:
b3:23:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:43 2025 by rpki-client