Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa
File: 42404971-4aca-30fb-a1e4-ab366b0ba71c.roa (raw, json)
Hash identifier: lKasLYZSJ0w85CKOta1lb3EnqiBHva2fJNhntBnkc5s=
Subject key identifier: C9:99:2C:CE:8A:98:00:03:FC:B0:8A:9D:8A:83:9B:0F:54:F4:CB:2C
Certificate issuer: /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial: 010D0C9F432858482EBFFE10720EB4FB5A43A0E0
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 29890
IP address blocks: 148.76.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:bf:fe:10:72:0e:b4:fb:5a:43:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=2ca7324b-2072-466e-b013-bcbaf876fa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:74:ca:0b:44:9a:55:2a:ca:34:95:0f:14:
49:39:2a:21:30:51:73:33:8f:39:c4:12:25:47:7f:
2b:42:a9:e8:91:cf:e7:ed:c1:a2:ee:59:2a:4d:04:
d9:7b:8e:30:f7:68:88:71:c2:f0:54:d5:f9:1e:52:
09:29:79:36:30:a6:90:ba:a0:1d:f2:c4:2e:20:47:
1f:16:0b:5a:ab:6a:81:a4:99:b1:ad:e7:d7:42:05:
f7:86:6e:d1:50:a2:4f:d1:54:54:43:20:c6:09:0d:
ad:09:ec:8e:3e:6b:74:9e:fc:45:aa:66:ac:46:13:
cc:5d:fd:71:e8:1e:e1:82:a2:d5:e4:89:33:ce:bd:
17:b7:00:4d:8f:9e:ff:5c:f0:c8:55:9d:d9:6c:01:
96:b3:d5:4d:e4:1e:b6:8e:ac:46:ec:a1:d0:d9:20:
10:6e:2f:cc:d7:b6:27:9e:1f:ce:af:e4:20:2f:3a:
81:57:c6:7b:78:9e:d0:58:c8:0f:83:4c:47:09:3d:
3b:11:82:63:6d:8f:f3:36:64:e6:06:77:8e:de:9d:
e1:29:e8:a7:25:1f:cc:24:86:79:ca:25:70:37:4b:
03:cb:ab:99:29:bc:8f:90:de:f0:80:98:27:fd:3f:
e2:5a:af:e8:d6:4a:4f:ae:0d:c5:68:8b:cc:21:85:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:2C:CE:8A:98:00:03:FC:B0:8A:9D:8A:83:9B:0F:54:F4:CB:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
X509v3 Authority Key Identifier:
keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
sbgp-ipAddrBlock: critical
IPv4:
148.76.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:f7:c8:b2:49:2a:75:ed:ff:0f:9e:90:e4:dd:d9:51:b0:19:
e2:6b:11:e9:e3:9d:57:23:b7:7d:54:4c:35:d5:6e:20:63:42:
40:10:93:5f:9d:32:69:7a:61:d0:37:49:ce:0e:18:e2:52:87:
99:0f:32:72:db:4c:3b:ff:fb:93:67:dc:83:af:2f:97:98:8c:
24:83:8d:a9:b8:81:7b:82:83:c0:04:ea:ba:b2:fc:f4:92:68:
16:b5:97:04:a7:c0:67:02:47:41:fa:e8:d1:a9:75:c1:0a:95:
84:44:08:d2:37:b3:f3:37:30:97:c9:9d:b3:3d:a6:c3:64:ea:
a8:37:d2:dd:e0:53:97:87:6e:c7:cc:af:4c:67:7f:e2:d2:37:
55:6e:b3:ac:fd:58:56:a9:01:9d:ea:44:01:71:b9:0c:11:a4:
d2:ab:ae:57:15:48:7b:6b:1b:13:d0:87:75:39:6c:d4:b2:d6:
3b:d0:6f:be:cc:1c:e8:c8:77:df:bf:ac:66:22:86:9c:27:59:
d2:a3:79:bc:d6:cd:3f:d9:ed:03:cd:c3:9e:a0:18:92:0b:4a:
2c:f6:38:ff:c7:de:a8:25:61:55:92:4a:c7:f9:d4:6e:c6:89:
e5:75:67:9a:8d:f9:9f:06:d4:72:f7:2d:cb:36:4f:8d:e7:87:
ec:fb:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:44 2025 by rpki-client