Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa
File: 8167458d-3c38-335e-be8c-af4a2cce0f94.roa (raw, json)
Hash identifier: ztDCTuSWSlcoUImX9Ezlh4Cx48/2gUzMoclgXYZls3E=
Subject key identifier: 9E:47:27:10:D4:61:03:0E:CD:FA:24:AF:09:0E:88:6A:03:1D:43:53
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584886E1F1812265C596F77BDD00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa
Signing time: Mon 13 Jan 2025 03:40:27 +0000
ROA not before: Mon 13 Jan 2025 03:40:27 +0000
ROA not after: Sun 13 Apr 2025 02:40:27 +0000
asID: 63199
IP address blocks: 148.153.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:e1:f1:81:22:65:c5:96:f7:7b:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jan 13 03:40:27 2025 GMT
Not After : Apr 13 02:40:27 2025 GMT
Subject: CN=65ef3ee9-ef25-4f05-a8e2-d2c003eb3a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:38:fa:15:2e:fd:03:6b:fc:41:ba:a7:06:
01:4a:c7:07:0e:f3:0c:02:e2:fb:5d:44:17:d6:da:
b1:17:a2:0a:ce:91:0a:d8:72:27:e2:92:23:92:16:
2f:b9:69:86:f6:a9:39:ee:3a:01:33:88:53:a8:af:
42:8d:f9:0a:4e:62:f0:a9:08:a9:33:fc:da:73:a7:
a4:d7:4b:91:25:bb:4e:39:5b:fa:e5:94:f2:21:90:
08:a5:b9:91:bb:52:e8:47:58:16:a8:44:51:3e:2f:
b5:16:a9:9f:57:28:fd:0f:48:8a:37:0f:b7:3b:92:
16:4b:f7:ce:78:df:c2:92:45:2a:e5:21:34:60:d8:
bb:e3:09:90:51:02:15:0c:64:24:05:6a:95:64:a9:
50:74:bc:a7:11:69:db:4f:38:7c:22:7c:f9:32:1e:
17:02:d0:80:f9:b3:43:a8:4b:39:10:c4:66:ff:50:
60:71:22:ab:37:30:1d:1a:ab:a0:fb:87:a3:fa:7e:
63:e1:4a:85:aa:91:08:75:7f:bb:c6:79:43:96:ed:
f6:c5:a3:80:be:c8:99:47:10:fc:b2:0d:12:39:bd:
d0:b1:37:97:c7:6f:92:fa:3a:0b:50:d6:14:c9:ba:
9c:34:28:94:9b:e7:ef:b3:79:15:ba:b4:14:04:e7:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:27:10:D4:61:03:0E:CD:FA:24:AF:09:0E:88:6A:03:1D:43:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:50:a6:a5:4a:7d:82:46:b6:4c:1b:a0:83:20:75:a9:2f:fa:
71:8a:d7:76:68:8a:e9:4f:58:39:7c:60:65:83:8f:5a:52:a6:
67:02:80:f1:da:54:ae:83:be:a7:24:2a:75:10:f1:dc:6f:8e:
ca:3a:0c:48:4a:fb:2d:c3:f6:d6:d0:f2:33:32:db:12:91:e3:
b4:00:c6:1b:3e:d3:fa:23:fa:6d:31:6d:2a:a2:c1:1c:d2:11:
18:d2:b3:00:31:f2:d5:b3:df:01:be:68:c6:ff:8a:7e:f6:01:
a4:31:d3:ea:27:bf:04:60:60:cf:9b:32:5d:c6:6e:0d:2b:92:
de:1a:0e:4b:47:07:45:6c:e4:26:09:97:ac:d6:e9:89:3c:75:
1f:e0:01:96:8a:1f:8e:89:d3:09:6e:01:7e:30:59:93:f2:2e:
89:ce:2b:08:75:e0:f8:88:1a:58:a7:4a:5b:af:c8:05:f0:1a:
68:81:f0:a4:32:0a:ed:b7:11:0b:c7:2d:62:63:91:86:a9:b1:
4b:fb:bd:98:2d:b4:ee:18:61:ac:c2:fd:c0:cc:5b:58:b8:2a:
c4:3e:16:e2:23:f5:9c:ce:89:07:eb:6c:79:0e:a8:75:4d:53:
dc:af:4a:de:01:d1:ed:47:4e:50:a8:ba:fc:52:d4:0c:bc:f5:
4a:05:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:23:08 2025 by rpki-client