Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa
File: adf36c37-4768-388e-a580-48e9d862ff18.roa (raw, json)
Hash identifier: 8yRoAIjL7HZMrWZOj18y6zryP+q22jI3zjq+j25TlTs=
Subject key identifier: AA:50:A1:48:9F:55:E3:4F:E0:ED:1D:6F:54:57:EB:FB:FB:7F:C0:51
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8EEC6C716EAB08788A00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 148.59.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8e:ec:6c:71:6e:ab:08:78:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=200d4226-1793-4223-b546-0da9894993de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:b6:ef:75:2e:5a:36:1e:95:84:a3:e8:c4:
13:51:ea:3f:2b:cc:1a:91:d6:00:35:11:7b:4c:a0:
78:93:e0:e0:ae:41:91:79:fc:8e:6f:df:e8:3f:0a:
5c:d6:68:6e:44:9f:7f:5a:51:05:ad:bd:cf:81:c0:
87:07:e1:a9:92:29:c8:72:64:0a:54:6a:98:27:44:
e0:a1:d7:f3:5e:ec:f7:07:41:b8:50:c7:2f:c6:ac:
4e:26:a5:6b:10:7b:1f:da:8e:89:0d:77:c7:e3:bd:
bb:a7:b9:6d:8a:4f:8c:35:0e:79:cd:2b:59:46:9c:
cd:d5:5c:e9:e9:09:10:27:40:07:01:a9:47:11:45:
1d:1e:7f:b1:37:44:40:b5:04:8d:37:68:e7:78:9e:
ee:a7:53:e9:62:58:00:f9:28:1e:ae:f1:3b:cc:7b:
7f:8d:61:65:b9:f7:f2:a8:f9:cc:05:95:3f:f8:8a:
24:1a:44:3c:68:61:3c:90:cb:aa:7f:e4:1d:d8:96:
57:8d:83:2d:89:81:96:48:a8:e6:37:55:49:ca:cb:
c0:23:1f:62:71:6b:f7:96:4b:ff:c0:68:02:45:fe:
5e:ed:e9:c1:af:00:90:31:02:27:be:e7:53:95:91:
1f:eb:93:cf:bd:ef:70:32:f2:dc:f7:28:11:a1:30:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:50:A1:48:9F:55:E3:4F:E0:ED:1D:6F:54:57:EB:FB:FB:7F:C0:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:d5:ec:95:b6:b5:81:bb:b6:e0:83:bb:33:8c:de:bf:ee:7c:
02:24:3f:77:0a:91:73:01:08:a2:e1:37:ea:73:5c:1f:46:25:
da:c1:57:58:bf:fa:08:d9:78:3a:19:5d:46:5d:42:2f:7f:e5:
cb:d0:38:e1:49:39:eb:1e:5b:51:5d:23:a7:54:bd:f6:52:d2:
27:d0:2f:5b:24:8f:08:79:2d:e1:db:a6:f7:43:ff:9e:a9:82:
83:72:19:0b:9a:bc:2b:bf:60:8a:43:58:15:e3:42:71:f7:c7:
0a:8c:e4:92:0b:f3:c5:81:7f:82:ae:30:0b:73:4a:dc:54:1a:
c2:6e:e1:52:ff:aa:44:79:4d:6a:9a:24:cf:41:3b:ea:d8:92:
cd:42:b9:c0:0c:1e:53:ea:27:b4:45:e6:b3:b8:29:27:ed:2a:
91:19:8f:1e:b8:d2:07:56:eb:96:93:1d:c5:9e:41:53:ee:88:
13:20:40:6e:6b:bf:d6:10:52:99:e6:3f:b0:55:60:5b:48:95:
76:c2:15:a7:00:ba:72:19:b5:55:5b:7c:0e:ee:dc:f7:3e:1c:
0b:1e:a3:05:67:a3:43:c4:26:84:a4:1b:09:37:00:58:65:2e:
69:2c:f4:e2:01:fb:2e:fe:ca:88:09:06:ae:b0:20:1a:a2:25:
1e:3c:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:59 2025 by rpki-client