Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa
File: 251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa (raw, json)
Hash identifier: mVbKsHkG6cMRn8/OgRZDtHJON03senRUelTDk3MCCZQ=
Subject key identifier: AC:CF:32:FC:15:3B:92:76:EF:5B:F6:21:1F:C7:01:EB:A9:A6:37:38
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584851A57E58993BAA7C7C622B80
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 63199
IP address blocks: 148.153.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7e:58:99:3b:aa:7c:7c:62:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=cc84916c-007b-4bb7-ad0c-a4c7aedcc012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:45:7c:51:dc:c8:89:49:f4:fd:a6:9f:bd:
88:fa:33:08:e9:62:73:fa:4f:41:be:37:bf:da:2a:
80:7c:cc:c5:21:b4:19:27:27:3a:fc:46:1a:65:66:
14:13:c4:2a:86:f7:e1:cf:fb:48:2f:65:94:e6:2c:
04:ae:a2:f3:5e:a2:3c:c0:c6:3a:ee:4c:b6:1a:bf:
48:7c:14:cd:b2:73:d5:6f:84:4a:7a:f4:75:46:56:
eb:25:fd:b4:e2:e7:76:80:a5:d7:74:76:17:73:8b:
02:b5:55:1e:d3:9e:71:bb:b7:a1:d7:f0:cb:48:26:
45:3d:bd:7c:43:0c:c6:76:0b:fc:a1:9b:68:34:01:
c1:35:bb:f0:f7:40:2e:ab:7c:77:87:8f:1f:41:c5:
e9:44:80:25:15:65:62:20:28:45:b4:e5:f9:d4:e8:
f0:8c:bd:7b:bc:b5:ed:ce:90:0c:82:f2:9c:21:c2:
0c:84:94:47:5d:69:f8:06:b0:38:00:fb:24:83:12:
df:52:2e:51:fb:6c:a0:d6:b5:99:bd:c8:00:7c:60:
e4:54:ee:9d:5d:c7:21:6c:e6:da:30:8d:35:b3:8e:
88:57:cc:ea:b9:01:99:bf:9e:9a:d0:f6:b4:b2:d5:
d6:0a:be:65:12:47:91:c9:ee:8e:d7:85:80:27:0e:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:32:FC:15:3B:92:76:EF:5B:F6:21:1F:C7:01:EB:A9:A6:37:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e0:86:a0:05:21:4e:01:28:5e:ee:03:76:7f:24:6b:6a:f7:
c0:90:08:13:92:c5:6a:8a:f1:65:e3:c9:6a:1f:90:61:63:32:
b4:ad:a4:f8:07:6e:3e:6c:37:05:55:10:64:16:08:eb:ed:96:
b7:07:4b:14:b7:5c:a9:dc:57:84:e2:0a:57:b1:60:25:36:39:
89:f1:1b:31:ac:1c:e3:73:06:d4:71:23:89:61:f3:f1:a0:48:
14:e5:86:4b:4b:ab:82:08:8f:c5:46:71:4c:10:e7:ca:1b:51:
ea:c8:91:3a:3b:20:30:3c:c0:49:21:9e:6a:43:b9:7c:d6:89:
41:1a:9e:00:d5:f7:7e:8c:df:83:42:3d:02:91:24:7d:b8:dc:
16:5c:a2:1a:c0:1f:8a:f2:7b:ac:ab:cc:b5:ab:51:d4:2b:8b:
f2:ba:4b:41:f8:42:c2:12:88:53:6b:84:95:f0:ed:d8:7c:db:
5c:fc:93:42:3c:5a:b9:f3:25:48:c7:42:7a:d9:8b:3b:e8:0e:
ab:f9:fb:91:13:85:7a:b1:2f:2a:33:e2:58:87:17:e7:6d:50:
33:ae:d6:da:25:91:06:c7:95:0a:1d:3e:5d:3c:61:dc:da:de:
5f:94:6e:3e:4b:fe:1f:e2:da:4d:bb:40:06:0e:c5:7c:75:3b:
2f:04:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:44 2025 by rpki-client