Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
File: f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa (raw, json)
Hash identifier: hHTIXmpyIaZNh6LEhNw7ZDGXRY5eSekBO22VSeabhMQ=
Subject key identifier: DB:A3:26:72:DA:51:D1:5D:79:97:49:8A:79:DE:93:98:41:97:E7:1E
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858481B79B3589EDAD9CBCAC67790
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
Signing time: Thu 05 Dec 2024 16:18:55 +0000
ROA not before: Thu 05 Dec 2024 16:18:55 +0000
ROA not after: Wed 05 Mar 2025 16:18:55 +0000
asID: 398101
IP address blocks: 148.72.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:79:b3:58:9e:da:d9:cb:ca:c6:77:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Dec 5 16:18:55 2024 GMT
Not After : Mar 5 16:18:55 2025 GMT
Subject: CN=cdaa65c5-922b-4f84-bc25-32d9028fbd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:ce:e8:28:ae:c2:ba:98:2f:49:e2:58:54:
51:5f:02:b7:4f:aa:51:3c:1b:d5:f7:be:cd:25:8d:
d9:a2:d0:d6:1c:9c:85:61:3a:01:36:8f:d1:40:3c:
b5:de:56:d7:bd:00:fb:2e:32:61:9d:0d:cb:c5:ec:
8b:05:96:a3:9c:1c:b3:e0:50:07:0f:bf:a0:5b:59:
6f:78:63:73:24:d2:5f:2d:84:11:a6:c5:d1:8b:08:
f6:ee:18:fd:b3:c8:4f:68:11:77:94:ae:0d:50:03:
f0:11:b1:6e:63:3b:33:5c:7d:0b:d7:19:a2:38:a4:
c6:c8:79:aa:4b:95:e5:7f:95:b1:d4:ed:7c:4f:ce:
0a:bb:92:6c:4e:70:4d:36:d6:7a:b6:81:03:58:f1:
84:49:a6:b5:3d:3c:26:af:72:a6:50:4f:14:e0:5d:
96:46:0e:59:47:ae:bb:b5:00:3a:ba:e3:42:ea:7f:
d0:db:84:6a:24:62:eb:63:65:10:3f:fb:22:35:59:
fe:a7:b5:43:ab:83:b1:0d:34:b9:21:6e:6a:34:ad:
47:61:7e:37:d2:68:cd:13:14:27:f8:a3:af:9a:21:
8b:15:39:79:4c:d3:81:cb:4e:8f:00:44:8e:de:20:
bd:3c:6a:d4:b9:9e:d7:8f:7f:fd:d8:7e:c0:86:93:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A3:26:72:DA:51:D1:5D:79:97:49:8A:79:DE:93:98:41:97:E7:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
148.72.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:db:82:1f:ad:1c:05:ee:e7:59:ea:12:2d:65:af:8f:c9:88:
80:ce:e4:6d:cf:ea:dd:b6:04:2c:a1:48:12:4e:a1:d3:b7:d7:
1e:2c:34:ff:ac:ce:56:d9:1b:ae:eb:23:8c:ad:d4:2c:6c:c8:
70:26:3e:49:2c:b4:c8:66:3d:2e:0b:99:18:3b:e5:3d:9b:f6:
88:37:c8:72:a3:39:74:c3:0e:23:65:b1:ee:d0:0d:a4:41:05:
cd:69:89:e1:04:1e:13:6b:49:17:02:e7:09:9b:0b:53:ba:e4:
ad:db:74:67:54:4d:f4:10:41:61:50:d3:91:52:d6:8f:79:77:
c8:30:cf:fb:8c:ad:72:bc:ee:b3:66:40:d3:b2:ec:ac:6e:3b:
58:3c:0a:e5:13:66:9e:e6:c1:ea:02:51:1e:8b:0e:28:77:d7:
d8:08:b2:25:86:64:38:23:90:dc:99:a1:22:18:cf:77:79:dc:
eb:df:43:1e:51:30:a0:21:44:bd:57:60:30:6f:15:ee:5e:8c:
e2:b8:fd:fe:22:e0:fd:cf:4e:b0:5d:11:c1:fe:3e:6a:d7:ed:
78:d5:26:ff:bf:87:73:5e:c2:ee:c9:4c:21:5b:79:a3:0f:12:
94:2f:ce:e3:41:b4:da:6d:c3:7b:3e:27:92:60:e5:2d:3d:65:
3c:05:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:01 2025 by rpki-client