Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa
File: d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa (raw, json)
Hash identifier: bIbi2QOgZ9TjrR94sKLWBoq80+Hwu6qXD88/f31hYcM=
Subject key identifier: A2:A1:B9:7F:25:14:ED:D9:44:BD:21:0C:21:37:24:44:A8:CA:4F:D4
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584832F040CC53552FA8EE143780
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 63199
IP address blocks: 148.153.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:40:cc:53:55:2f:a8:ee:14:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c41ced35-f078-4f6a-9aef-c604bc815d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:73:a8:15:6b:e1:91:66:6d:95:ed:37:36:
d8:48:ee:2d:bd:3f:2e:7f:7a:e0:6e:63:7f:96:5b:
00:95:43:31:99:ca:8d:ff:08:3b:44:d3:95:79:62:
fb:7c:d6:d3:23:cb:7e:a8:70:99:e6:22:df:80:80:
50:dc:33:46:0f:3c:d4:48:2e:3b:80:05:bc:e6:36:
d5:67:dd:82:db:53:59:74:f8:e5:30:3a:1e:07:5a:
8e:ba:2c:20:f1:1b:40:60:4b:2e:de:0f:96:b5:bc:
65:4b:8e:1b:92:47:25:fa:81:37:5e:b2:4f:74:8f:
6f:2e:82:c1:cb:eb:6c:a0:2c:49:f3:9d:8c:9e:6f:
13:54:a7:f7:b8:8d:64:c9:26:9a:74:0f:d9:1c:5e:
00:2e:bf:87:8b:47:8a:38:bc:09:9a:f4:bb:8c:70:
25:00:1f:cc:20:6b:93:6b:11:b9:fb:c4:2a:dd:e7:
f3:e8:16:ed:ec:18:57:27:ca:29:38:56:5d:b6:d9:
20:97:ed:2a:b7:57:44:35:28:88:7c:66:87:04:dd:
d2:f9:62:2c:34:1a:e2:23:2d:f9:6a:c1:96:3b:d7:
c8:f1:ea:41:5a:6e:05:29:83:f2:c2:29:d6:cd:f0:
fb:2c:9e:e7:f2:df:a5:04:b9:16:5c:1e:3b:1e:fa:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A1:B9:7F:25:14:ED:D9:44:BD:21:0C:21:37:24:44:A8:CA:4F:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:79:f8:fd:01:80:9c:99:a6:b9:a3:b8:6e:54:fc:5c:36:ec:
67:4e:64:4b:c8:bf:7b:1e:93:74:95:ac:86:2b:7a:c3:fb:37:
55:16:19:e0:fd:ec:bb:a5:75:8b:7b:a2:14:69:fa:46:45:5d:
d6:c4:52:8a:d5:39:3b:91:22:2d:92:4a:5b:8b:c1:85:c2:43:
4f:22:cc:f6:ca:1f:af:8e:db:76:44:91:e3:7c:9e:0c:6a:3e:
2a:f1:17:14:b4:49:76:5e:30:cd:b2:8c:fd:f3:4f:80:55:da:
9d:95:3c:b1:ee:f3:04:53:af:b2:76:04:50:a5:b1:1e:ae:dc:
1b:a0:79:58:02:91:76:cd:10:0a:c9:ee:01:c8:c4:c5:d0:7c:
16:eb:d6:5e:54:3e:4e:5a:8f:ad:4f:90:48:cb:fe:5d:a6:06:
74:16:1a:d0:b2:76:1a:45:a1:c1:18:77:a2:9e:4b:9a:52:06:
fb:5b:9d:ac:f8:17:3a:23:59:ea:6c:ef:f9:11:2e:90:ea:78:
ed:94:b3:45:a2:6d:ce:fb:90:83:5f:c1:33:87:f4:ad:56:38:
22:1a:7b:7b:7a:45:5c:0f:7a:31:fc:65:ad:b0:ba:e7:7b:59:
84:7e:91:cc:6a:1d:01:d6:4a:53:3c:84:fc:63:77:40:4f:09:
87:45:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:50:19 2025 by rpki-client