Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa
File: 2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa (raw, json)
Hash identifier: PJVYTqbMWXEzNI/b5dUsiReGh351blYCUWYHjPApUHE=
Subject key identifier: 11:17:75:96:C7:87:28:D1:D7:E9:F2:06:59:94:C7:44:72:16:D0:15
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F432858483F80298D53E0BE1F44DC2E60
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 63199
IP address blocks: 148.153.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:29:8d:53:e0:be:1f:44:dc:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=b709d853-4e4a-4993-b3d1-bf47d33df7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:3b:78:c3:37:58:06:b3:bb:2b:14:b4:31:
94:1a:30:b5:9e:f5:f7:36:ed:bc:05:9e:fa:fc:39:
61:9f:08:bc:01:ce:71:cf:b6:3a:7b:26:90:2c:f7:
97:4c:ba:ba:4c:a7:89:b0:1b:5c:c0:d3:c1:f0:57:
f1:66:c0:1f:a9:3d:5a:4c:27:7c:eb:72:97:d1:4a:
3c:1b:91:0e:ab:75:b7:3d:e9:57:65:9b:4a:08:58:
8d:4a:27:50:0e:03:73:06:63:1d:69:ad:17:2f:71:
91:38:0e:95:16:40:fa:93:e3:31:5a:f5:30:89:1d:
cf:af:88:dc:8f:38:ba:e0:29:a9:47:8d:55:af:26:
cc:ff:7f:29:be:dc:a3:b2:7d:6e:6e:b5:59:85:6e:
e6:ca:45:f0:20:27:43:4d:eb:11:a8:0b:52:20:8f:
be:97:d9:ee:2d:59:1e:10:76:58:82:d6:39:ee:84:
5b:ca:c0:79:5d:88:15:16:e0:b7:1f:41:fd:c3:47:
42:0a:9b:9f:04:de:5f:63:66:f1:4d:8b:25:ca:33:
9e:1e:75:46:1c:fb:bf:bb:d0:5d:65:a5:8f:04:11:
ad:3d:cb:70:5d:32:2d:ca:01:f1:4d:4e:dd:f2:51:
57:9d:9f:aa:31:16:d5:da:ea:c6:ea:63:21:a0:52:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:75:96:C7:87:28:D1:D7:E9:F2:06:59:94:C7:44:72:16:D0:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:66:08:94:06:ca:6b:aa:e1:50:1b:d5:56:c2:25:45:48:00:
a3:b3:71:2a:49:b2:6c:92:6c:0c:41:f9:d1:71:3c:41:f6:3c:
33:77:14:69:09:23:b4:25:55:53:57:44:09:f6:4a:aa:21:d3:
10:8b:31:5d:bc:4f:3c:ea:7e:66:27:18:49:d9:3b:94:fc:90:
d3:ce:63:77:83:d8:63:ab:56:a1:48:16:cc:81:4e:99:10:55:
b6:38:64:46:92:ee:36:ea:72:5b:f5:0a:5b:c2:1c:1a:8a:b8:
31:6a:40:31:c6:07:85:13:83:bb:6b:a8:be:e3:6c:3e:eb:5a:
e7:e1:65:6c:ea:c6:b6:0f:2e:d7:c0:a8:e7:cc:08:99:fa:68:
2d:39:4d:5e:f2:6f:6e:90:5e:4d:53:b9:61:30:21:11:0a:c4:
74:6f:6d:60:4a:69:56:fe:99:5c:71:7e:8c:da:ec:27:0e:20:
1f:d3:a8:18:7c:02:2c:26:83:5a:86:15:65:2b:9e:4f:a7:9a:
cc:03:c9:61:be:72:11:38:a6:4a:10:8d:d7:ed:66:eb:50:01:
10:fd:c5:8e:ab:73:6e:49:22:5b:e7:42:48:ab:8a:96:f9:9e:
ab:18:0e:c0:fe:16:e1:1f:65:fd:65:d9:b1:38:75:35:5a:1a:
44:9f:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:51 2025 by rpki-client