Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa
File: 22f2a491-5aba-30ba-8bc5-08890e1745f9.roa (raw, json)
Hash identifier: NKkrcHGo+kth7mXM1snLyYi6tFA9gWqKWdjcCTY2nNI=
Subject key identifier: 9C:D3:95:2D:54:00:B3:8F:76:86:C8:E5:F0:55:48:7E:7C:2C:80:E6
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584819CFDD074F455A35CEA33540
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 63199
IP address blocks: 148.153.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:dd:07:4f:45:5a:35:ce:a3:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=c8aad5c0-773c-4918-b95f-0cbe45efe819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:fd:e6:e3:96:49:04:09:8c:84:26:ed:8a:
33:dc:ad:17:ed:6c:fc:4c:b7:95:b5:f9:48:cf:a2:
64:f5:a6:7c:0c:f9:71:f7:ff:23:87:f6:44:6f:f6:
03:d3:46:ed:6a:f6:71:64:ac:e7:7f:f8:05:d5:48:
80:da:ac:48:45:42:c1:30:ad:a9:9b:41:af:88:0f:
95:dc:5b:d4:9a:6b:21:58:ed:a1:7a:dc:bb:b9:6f:
c0:21:0b:7e:ef:12:0d:2e:1e:8f:88:34:87:d6:2d:
0f:f1:0a:36:8a:65:20:04:38:f5:0a:0e:09:35:dc:
02:ce:25:eb:79:20:45:76:8e:a4:0c:30:ec:26:02:
87:0c:1b:91:19:4c:6a:00:38:31:92:95:3c:01:e2:
40:ef:74:68:00:6a:0f:ac:be:13:a1:fa:39:f2:bb:
0c:f8:92:f7:a8:1c:af:ba:00:ec:fd:17:30:77:7d:
ef:ac:c6:73:e1:d3:51:f7:a2:21:99:35:41:6e:51:
24:60:82:5a:69:dc:0c:75:82:dc:c9:7f:ab:d5:73:
c6:00:99:9b:92:90:b9:62:45:bc:e2:a1:90:29:b5:
0e:a9:5f:a7:4a:07:98:68:5d:08:af:60:6c:40:d2:
a7:8c:97:01:da:8b:01:f9:a9:03:b0:4b:71:7e:be:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:95:2D:54:00:B3:8F:76:86:C8:E5:F0:55:48:7E:7C:2C:80:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f1:de:2b:36:0e:55:fc:d9:1e:f9:38:0a:54:c0:c3:bb:a2:
3f:34:7b:40:62:e4:3f:b6:53:36:3a:59:49:94:12:9c:a7:7d:
0b:d1:56:93:30:00:c8:35:bb:91:21:df:66:d5:e8:dc:ea:7a:
5d:07:c6:ba:a6:d5:17:16:f3:7d:7c:88:f2:09:c8:3d:11:af:
2b:86:c3:26:91:3f:9c:1e:ef:e9:91:60:2e:56:62:22:ef:c2:
4f:6b:7f:02:dd:07:ea:78:f3:9e:61:9b:05:c9:00:74:7c:e2:
8d:6d:5e:91:1f:6f:47:b4:a2:9e:cb:aa:1c:22:12:e7:ba:d7:
53:27:63:49:59:6e:4e:16:a4:d1:b4:e0:53:85:26:d3:ae:fd:
bf:4e:e0:51:46:19:c3:76:a2:8e:40:ba:e0:bd:7c:13:ae:7c:
9d:a1:48:79:57:ea:f5:14:80:c5:cf:3d:0c:08:e9:4a:9b:06:
a2:55:50:e3:03:ce:be:2d:79:64:6b:26:43:49:df:63:be:d2:
b0:9e:45:0b:8e:b1:a6:cf:5b:ce:ba:b3:63:df:be:32:b7:fd:
ad:cb:03:89:02:8a:f9:91:3f:d1:2b:65:7b:54:f1:71:c0:53:
ee:f4:7a:9b:d2:94:04:61:89:52:1a:32:a0:cc:ed:e2:3c:53:
55:e8:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:00:35 2025 by rpki-client