Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa
File: 135e9a6b-d871-31bd-aedc-3aee5546ac72.roa (raw, json)
Hash identifier: zp2P4qCHsPvR28z3N8Q8zk08n55FHJpOhTWHQMOrOjU=
Subject key identifier: 5D:4C:40:8F:BC:89:BA:C1:D7:2C:31:98:D9:58:E8:5A:66:33:F8:0A
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8ECD816785162E823880
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 148.59.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8e:cd:81:67:85:16:2e:82:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=a7e0dc79-21fe-47c6-8bc3-6f13a4f2137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:c6:3f:5b:cd:99:9b:2a:19:73:8c:5c:62:
96:2b:b6:17:57:cf:87:8c:be:eb:be:be:f3:99:e6:
87:d3:a6:63:cc:e0:cd:92:9f:21:01:4a:a6:7b:13:
e6:7f:a8:dd:f7:04:38:82:ce:01:2f:dc:87:94:74:
d5:7f:97:e2:be:c8:25:1f:90:fe:2a:a7:1a:b5:03:
3f:b6:19:4f:31:fe:0b:cb:f3:7f:47:c7:4d:29:4d:
b4:6f:5b:85:7e:99:6f:56:00:57:6f:cf:11:b8:05:
b1:34:f5:dd:6c:f5:16:2c:b2:5d:ae:95:12:ae:55:
d4:c8:73:54:8c:c6:0f:42:42:01:73:b3:a7:d6:ee:
cb:e2:b3:73:19:56:31:ca:38:fa:bd:ef:cf:4a:35:
cb:08:34:ec:47:90:91:2e:ac:3f:13:b8:3e:03:db:
dd:7b:ef:99:13:58:b7:9e:85:38:99:da:c6:65:f0:
49:92:3c:d6:0e:66:7b:1f:64:9e:c6:07:ce:81:d9:
a4:b7:49:91:cf:24:3a:7c:0e:d4:d8:de:ba:b6:14:
83:d3:5e:c5:34:eb:f5:91:54:e4:da:5e:94:fc:08:
3a:1f:7f:3f:0d:64:45:ee:e9:1d:b8:c0:ec:5f:1c:
ae:1a:44:9a:35:9e:95:8b:62:6a:a9:39:05:e3:1f:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4C:40:8F:BC:89:BA:C1:D7:2C:31:98:D9:58:E8:5A:66:33:F8:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:d2:02:98:b9:ea:d5:60:c7:02:52:2a:71:12:05:e7:a3:0e:
b8:5b:b4:f2:5b:a8:02:32:b6:d8:47:eb:b1:27:71:f2:fe:a0:
79:ed:02:af:41:eb:45:8d:ce:28:2f:f9:39:52:0d:0c:90:a8:
0f:51:c1:85:8e:de:40:38:2e:c4:c4:35:d9:1e:2e:6b:67:7c:
24:3a:3b:48:44:1e:a1:6d:24:45:de:24:89:97:ee:0c:08:4a:
41:91:88:fa:5d:40:d7:58:2f:47:38:da:9c:fa:6e:7f:c7:d9:
23:91:13:cd:c0:6c:19:67:2d:94:c8:0d:36:b1:f8:a7:c5:52:
5b:b8:33:a9:01:50:30:45:82:41:76:d6:55:16:83:74:73:f4:
58:43:d1:e1:e6:24:b6:2f:01:2f:03:a6:2f:49:03:cf:eb:22:
88:fb:2f:da:ce:96:7c:80:48:43:01:4a:13:0a:b1:a8:c5:a2:
1f:df:00:85:f1:c7:3e:71:63:49:af:cc:9b:f8:82:2f:38:bd:
04:d5:e3:b9:56:a8:1f:48:c3:bb:0d:97:98:0e:19:53:53:2f:
36:5e:c5:f7:47:f2:0b:1d:01:fc:58:7d:f1:d8:4e:1d:40:63:
47:7d:d9:9c:62:7a:b7:3a:53:4c:e9:4c:7e:c1:0f:13:be:5c:
78:72:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:19 2025 by rpki-client