Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa
File: 550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa (raw, json)
Hash identifier: rTEdyNo01GqXnyST/BRQlShuCmBktNGQj1uulzNPaIs=
Subject key identifier: AB:91:53:1B:3E:74:48:CF:C5:DA:09:35:06:07:0E:E3:A2:C9:A0:1E
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8EF96D3D1B9406878A00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 148.59.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8e:f9:6d:3d:1b:94:06:87:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=d5a465db-dc0e-4b77-816c-6b277ec3b500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:8b:ef:b2:c6:07:2c:74:44:9a:06:74:95:
af:89:e0:0c:1a:7b:b8:b9:fd:8c:23:3e:6d:b0:a7:
e4:56:08:77:9f:13:a4:de:d0:1d:f9:db:05:28:80:
d0:f5:8c:cc:5f:97:03:76:57:5f:de:cb:2b:f9:80:
04:8f:c8:48:06:d4:7a:f1:07:36:ba:a7:7a:2b:b5:
0d:5b:28:bb:bf:04:a5:5b:bb:8b:02:ad:77:43:a4:
8c:00:55:eb:4c:f8:82:78:01:ad:5a:a7:ca:ed:8a:
30:71:93:0f:2d:1a:3b:d2:36:24:c2:96:90:4c:e7:
14:2a:06:b9:f2:79:8f:24:10:8e:3e:3b:d8:06:f7:
d8:65:71:ef:8e:99:17:1a:51:55:0d:4f:3a:3e:39:
6e:f5:53:26:96:c9:19:e5:74:d5:e6:ac:cd:85:9b:
60:96:b2:b5:82:d9:f4:fd:15:97:d9:11:3d:4c:b4:
1a:1d:2a:e6:85:4a:fc:2d:24:4b:09:f2:b1:46:db:
10:bb:17:d1:f8:e3:bb:a7:2d:97:ca:b4:41:4c:f1:
fb:f2:33:c6:39:f6:13:d9:47:13:08:e3:ed:ab:19:
67:06:6b:07:38:b7:bb:87:ac:b0:bd:00:7c:90:45:
59:74:2f:b6:0c:30:6e:4b:9c:a0:43:88:64:9e:b4:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:53:1B:3E:74:48:CF:C5:DA:09:35:06:07:0E:E3:A2:C9:A0:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:04:49:c6:39:5d:5f:e1:bb:63:be:36:24:c5:bc:b7:5f:88:
01:e6:11:74:d0:34:77:80:d4:50:76:ba:64:71:e4:fa:9b:e2:
ff:59:f3:16:8f:c7:65:89:ad:47:05:19:e7:ca:40:05:7e:ad:
50:39:86:27:db:76:8d:cf:eb:f4:ad:6a:88:24:cf:96:92:9c:
33:93:a2:5c:2f:0a:31:bd:95:f4:fe:4e:3b:4e:9c:24:be:0b:
cb:07:17:b9:2f:6c:64:f1:0e:ce:e4:8a:79:7c:d5:45:7a:3d:
08:09:99:ef:6b:ce:3b:76:41:5a:34:2b:79:8a:c2:22:2f:c9:
96:e2:c0:9a:50:15:6d:53:af:c6:e7:bb:8c:08:d0:6c:53:2e:
7d:16:58:cb:75:df:66:dd:cf:a9:c5:42:a8:e3:8f:cc:68:93:
1d:4e:cf:c4:a1:c3:33:0c:73:7d:fb:e8:cf:dd:6f:14:22:c1:
3a:fd:51:89:fd:50:da:3f:fe:de:bf:dc:76:eb:44:3e:af:6b:
e6:fb:ee:12:0a:04:a0:c3:78:28:ef:cd:c2:d4:5a:dd:61:15:
50:21:4c:eb:2b:8c:74:15:ab:90:e3:83:b1:04:8f:c0:c1:d4:
a5:af:36:90:31:6c:43:6b:a3:1c:f4:cf:3a:9a:11:a2:d7:43:
20:60:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:20 2025 by rpki-client