Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa
File: 9d198439-f575-301d-9005-1871e3887572.roa (raw, json)
Hash identifier: kEDj0JmwCapz2E7NMbMj7V4txSaxnnj66wjDtyYWVjM=
Subject key identifier: DB:2A:2E:9A:D2:8E:56:03:EC:B8:EF:E3:50:68:65:A6:FF:F0:B3:F5
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285848318AAA411B101E457A4135A0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 63199
IP address blocks: 148.153.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:aa:41:1b:10:1e:45:7a:41:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=3df8a4ae-be0d-43af-a30c-5a2e3a4d1632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:45:bc:85:18:2d:93:2e:28:33:b8:aa:09:
d9:4f:e9:82:d3:7d:c4:c3:8a:03:87:66:a4:71:e3:
f6:67:f5:c5:2f:fd:9e:b4:0b:f8:27:ad:50:7e:95:
57:da:b9:55:61:3f:0b:25:dd:87:9b:c1:17:b0:ca:
6d:8d:bb:f4:91:8d:c7:6d:27:3a:95:24:6f:90:c4:
ee:34:e0:5f:80:43:cc:7f:73:5f:7f:27:84:ae:38:
c5:14:82:ff:6e:67:78:12:25:ae:b7:46:c7:94:54:
95:33:41:62:28:85:89:f3:07:7d:ba:aa:a4:56:a0:
c3:eb:84:06:e7:05:5d:58:99:41:0f:c8:ae:57:48:
6a:4a:d4:50:7e:78:38:ee:42:8a:16:4f:13:48:80:
73:3d:9e:54:de:cb:3a:2f:02:68:bf:ce:e8:cc:09:
b3:a0:d9:45:a5:18:c2:ff:5b:20:11:34:9b:0b:5f:
a4:83:42:7a:cc:43:13:1b:91:5b:74:84:23:2b:55:
38:31:e6:c0:50:3f:a2:45:e2:d8:c8:9f:e8:45:02:
7b:6f:79:ce:d9:92:c6:66:e6:59:ff:ba:d0:8e:a9:
c2:54:12:da:a1:5a:09:09:ae:dc:75:42:7c:cf:e0:
51:1f:6a:84:da:83:20:5c:5e:2b:09:7b:a6:6e:65:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2A:2E:9A:D2:8E:56:03:EC:B8:EF:E3:50:68:65:A6:FF:F0:B3:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:1d:de:c1:90:32:30:fa:10:2f:ee:24:bf:be:91:c5:f6:e5:
cc:2d:d0:45:e2:ea:ff:17:d0:d2:42:6d:c7:52:7d:ce:22:d9:
5b:57:fb:8b:2e:80:0d:e4:ec:6c:ee:21:02:2f:ca:e6:9f:2e:
a0:4b:4b:16:5d:d9:ab:89:59:3c:80:b4:4a:98:97:59:fa:33:
62:91:7c:e8:ff:11:9a:27:96:ca:ce:cc:62:93:49:27:e2:d0:
90:c1:e3:c4:c1:8e:72:00:37:88:3a:05:bd:40:06:49:d8:e2:
04:a5:51:d7:c2:c4:4d:e2:56:97:8d:a3:10:28:91:a0:c9:27:
55:d7:7a:fb:e1:7f:4d:56:3e:e9:5a:08:35:33:eb:8a:38:11:
4c:5e:32:95:c4:ce:a9:53:0a:00:86:a6:1c:28:27:ce:03:72:
e8:6d:6c:6d:1b:f8:49:be:9e:97:4f:c5:9b:09:1e:c6:48:3f:
d0:ac:2a:dc:c3:4d:ee:7e:4c:a8:ae:16:57:50:34:84:8e:b8:
af:82:0e:bb:e4:8d:a5:65:9b:1d:75:e0:e7:0f:70:f7:94:55:
d7:2c:ba:fa:a4:4b:d7:73:47:e3:cd:45:85:a6:cc:82:66:de:
d2:75:44:bb:60:30:0b:f6:7d:da:48:c7:72:65:e6:a0:e2:f6:
f2:16:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:44:24 2025 by rpki-client