Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa
File: c0d325d4-637f-36da-a8b1-3933c07dd546.roa (raw, json)
Hash identifier: iMe01ChqASYCcmZnWe3ZuvQpsk5YNbOg6u0p6g9SqII=
Subject key identifier: B4:BC:F4:7F:67:C2:8F:9A:9A:93:FF:0D:B7:44:98:D3:71:DF:FD:63
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F432858487CEB2FBF719445ADAF85DD80
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 63199
IP address blocks: 148.153.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2f:bf:71:94:45:ad:af:85:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=21e4d093-7e32-4de3-9996-01cf4e9b58d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c4:d2:06:83:f9:f1:68:b6:8d:34:ba:87:55:
2b:6b:a1:b8:9e:45:21:c8:2b:1c:fe:80:20:06:de:
eb:23:f5:ce:1d:47:a3:48:00:54:c2:f6:dc:49:e2:
6c:fd:59:1b:68:5a:ca:cf:ed:cc:e0:52:30:44:96:
2d:88:35:be:67:97:3b:51:13:83:b7:98:b0:14:86:
17:cc:ec:12:56:29:6b:c6:c7:7c:7c:2f:08:15:4e:
8d:6d:bf:cf:c4:3a:93:bf:a6:3e:4a:2b:5e:6c:1d:
bd:da:4c:2a:fd:0d:c4:fc:8b:b5:83:d3:49:24:37:
b3:cb:e4:aa:bb:65:de:37:d3:3b:b3:0e:b6:dc:8b:
15:52:61:6a:cc:ed:c4:46:46:18:7b:bf:28:28:4b:
78:8e:98:83:12:03:18:85:7c:91:b4:94:c9:ff:6d:
4d:72:f5:3b:40:a8:e0:3f:2c:52:2a:ec:9f:15:bc:
6f:b3:a3:4f:11:e0:98:91:c2:86:78:d0:b2:89:84:
b0:2c:4d:40:aa:f4:3b:ad:d7:1b:67:f4:1e:7b:13:
36:22:23:0b:3b:4e:7a:dd:c9:6c:46:a0:cf:a6:c9:
bc:fc:ec:2e:43:03:31:bd:6d:93:a1:b8:cd:f5:b5:
63:42:65:5f:cb:ac:1e:04:1a:9a:dc:f9:2d:be:7c:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:F4:7F:67:C2:8F:9A:9A:93:FF:0D:B7:44:98:D3:71:DF:FD:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:70:0c:0d:d2:41:48:27:ae:18:63:43:bf:c5:fb:0a:9c:de:
66:e6:ab:22:6c:73:f6:cb:50:79:95:0b:f0:c1:03:b7:61:0c:
4c:72:5f:cd:7a:41:31:49:5d:c2:65:03:fd:4e:3f:ce:cd:eb:
24:17:6d:9c:52:b9:4f:d7:18:a8:78:e5:f7:df:7d:36:84:31:
b4:0d:42:48:fd:1b:c9:0a:b9:14:d3:d6:bb:67:e9:25:69:aa:
f7:85:ac:8e:3f:e5:4c:a0:09:10:e8:70:11:21:fa:d9:0f:00:
eb:34:59:ac:57:bd:35:d5:ca:29:6e:e5:47:c0:d0:51:0b:a6:
c4:b6:6b:42:14:b4:47:72:7f:fb:fa:28:14:a2:c4:77:97:b3:
22:1b:b5:1c:17:ff:a9:ff:ad:0b:cd:ce:ce:1b:cf:dd:9b:01:
09:93:b9:24:ac:1a:0f:6a:e7:0f:71:88:93:01:12:21:a1:cf:
aa:9c:04:a2:37:41:52:6c:9c:93:c8:00:de:31:bd:52:64:d7:
cf:43:57:d0:59:d4:cf:5e:cc:f2:66:5c:4c:95:81:05:bd:f6:
40:8f:21:d1:4d:18:85:32:ee:96:6a:c8:7c:e9:42:a8:b9:f0:
86:72:5a:0f:62:ef:a2:a5:d5:63:e3:61:cc:7c:b0:19:00:5f:
c0:7d:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:43:41 2025 by rpki-client