Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa
File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json)
Hash identifier: J3AZxpWGKJwZtEftcRe52pnhq8tUgJar9rwM2Cly1vU=
Subject key identifier: B5:6F:36:25:75:77:A0:94:8C:7A:11:B1:4B:2D:1B:B7:6E:0A:8D:D6
Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Certificate serial: 010D0C9F432858484515840E6F68F09E3641C800
Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14618
IP address blocks: 148.59.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:84:0e:6f:68:f0:9e:36:41:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=3a6833b8-5805-4b0d-8817-7e4dd47acf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:e1:87:be:86:b9:8f:a9:64:2f:cf:4e:01:
16:68:55:25:46:3f:c4:cc:0a:87:25:42:50:08:11:
4c:2f:62:2a:c8:63:9e:b2:12:2a:15:4a:25:f3:06:
c7:25:8b:ca:90:f8:c5:f5:72:8a:2e:a3:d8:45:d3:
0c:58:70:86:81:c2:57:a1:0b:de:8f:b0:2e:01:7e:
0f:33:30:0d:80:86:2f:0c:a9:1e:2b:ba:92:c5:92:
f4:04:be:cd:c6:57:b6:8e:8b:18:71:ed:10:1b:42:
38:2b:e6:e0:e0:e5:73:d2:56:72:d9:05:65:05:d3:
d7:37:40:20:97:9f:ca:85:09:3f:1e:da:40:86:0c:
4f:3f:14:52:7c:08:91:84:95:05:c6:b7:24:72:ff:
6a:10:4c:a3:eb:ae:53:54:0a:da:af:62:03:72:ce:
86:88:e5:cd:37:c5:57:a9:17:df:c9:e0:27:a8:67:
6b:f3:72:89:52:ed:1c:13:f6:81:7a:b1:70:4a:eb:
05:95:c8:1d:dd:3c:ff:83:2f:82:5f:f2:1f:83:8b:
47:a7:e9:86:45:ca:e9:d2:b0:f7:aa:2d:2a:4e:1b:
58:3d:ab:91:23:3c:9f:1b:ed:34:fa:b0:86:b6:92:
91:8e:83:a8:76:f4:d9:fb:51:ec:fb:39:b7:35:ff:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:36:25:75:77:A0:94:8C:7A:11:B1:4B:2D:1B:B7:6E:0A:8D:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl
X509v3 Authority Key Identifier:
keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c5:25:30:ac:f0:12:d7:cb:38:b0:ce:87:9f:f2:17:3e:5e:
9b:84:f5:2e:3c:ba:39:7e:f6:b9:2b:91:2f:78:73:03:2f:60:
54:12:bd:c6:d3:72:78:a9:04:b9:48:f9:e2:ba:ee:9d:fb:4b:
b0:69:dc:b7:99:f9:10:21:0b:fd:44:4d:ba:68:59:4b:b8:f1:
de:fb:16:21:17:5a:e7:2b:86:ce:74:e4:be:13:f4:51:78:c1:
6d:39:62:3a:f0:5c:08:b6:a3:2b:14:cc:4d:8c:e7:1c:e2:5c:
ad:8b:e2:01:46:bf:52:87:84:2e:9b:d3:b3:0b:aa:7f:cb:a0:
71:04:cb:1d:af:fc:ee:32:51:2d:be:83:e2:2d:67:0f:fc:08:
f5:99:58:93:83:31:b0:91:42:2f:07:57:0d:95:96:d6:21:56:
b9:68:03:e0:60:53:4e:50:e9:00:8b:22:0a:ae:3c:a8:c0:6e:
ff:f9:66:2a:27:61:6b:5d:93:60:e1:fe:64:f2:1e:70:74:05:
03:27:01:91:e5:e6:cc:1a:c8:45:f7:f4:56:14:e3:aa:03:55:
b3:4e:8d:09:ca:cc:63:22:d5:0c:da:27:c4:12:9d:8a:a5:35:
2f:57:a9:ff:8b:78:80:39:9f:fb:48:5c:c1:fb:7c:f5:5f:70:
8d:a5:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:11 2025 by rpki-client