Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa
File: 1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa (raw, json)
Hash identifier: uDh/5QYk5XqoFL0K/fRTxFTsHbqJCFEwDWdlvrNendA=
Subject key identifier: C4:D0:89:68:65:82:22:A8:28:4C:C9:35:7F:D4:30:94:F3:3A:D5:04
Certificate issuer: /CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
Certificate serial: 010D0C9F432858485F9AE168FF6DC6549344F880
Authority key identifier: E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 1638
IP address blocks: 146.88.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e1:68:ff:6d:c6:54:93:44:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=67ffcccf-b537-4037-b99d-a0ec8a8bef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:22:8c:9d:6e:64:dc:4c:5d:ce:d0:9e:73:
88:8e:bd:19:11:97:cb:6e:e6:d8:72:61:1c:87:3e:
dc:6b:b5:38:65:8f:7e:62:55:54:23:fb:26:01:66:
8c:79:55:90:2b:0f:4b:f0:eb:76:d4:d8:44:3a:72:
0d:3b:3f:b7:76:12:6c:fd:55:ee:6f:59:03:fa:ed:
69:a1:57:55:01:2c:84:3d:9f:8e:1c:b1:90:15:a3:
3a:5f:ea:bd:46:26:e6:a5:40:60:d6:73:82:13:7a:
2e:43:27:2d:86:c2:27:d3:b6:00:41:85:fc:2b:ce:
12:16:22:d0:5f:f5:5b:2b:47:fe:5f:fb:d7:10:be:
44:1d:55:40:44:b3:43:7a:a3:af:a1:10:68:87:72:
92:6d:dd:19:37:34:f1:fd:3b:dc:93:d7:2f:1b:8f:
09:86:48:59:99:6f:3b:27:e5:62:6e:81:a0:b5:e3:
8b:93:5f:9c:57:54:11:0c:b1:ef:bf:12:96:40:c0:
ab:00:88:b2:ff:0e:58:8c:20:93:ba:ab:42:57:ec:
75:7e:b4:74:af:48:7d:da:a5:8d:7e:6b:b3:d3:38:
f2:a5:5d:f6:09:7f:bf:ad:d2:2a:b3:d8:bd:8a:ee:
80:91:6c:be:e8:5b:54:63:5c:f8:28:2b:3a:fc:33:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D0:89:68:65:82:22:A8:28:4C:C9:35:7F:D4:30:94:F3:3A:D5:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl
X509v3 Authority Key Identifier:
keyid:E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
sbgp-ipAddrBlock: critical
IPv4:
146.88.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:62:d2:96:c6:f7:7d:9d:8f:b4:06:6e:87:2c:f3:ca:53:e4:
c1:c1:57:59:fb:db:f8:d6:33:2a:51:ec:27:a2:bd:8e:99:8f:
a8:f8:54:52:a9:32:17:08:59:c4:41:5d:18:09:d9:7e:61:6c:
34:4c:44:d4:4f:78:39:6b:6c:6f:68:df:38:86:77:55:8a:0a:
14:fd:47:03:fa:28:c3:03:50:bc:1b:05:0f:1b:a2:48:a2:5c:
18:79:98:03:4c:fe:f8:2d:55:17:50:8f:63:ef:2e:61:b2:e2:
86:0b:7b:92:c2:b3:e8:d2:30:c0:00:c1:e2:a2:b7:18:18:20:
da:99:a7:83:35:d8:9d:25:81:cd:6b:14:bc:29:5f:04:84:88:
a0:c0:f8:3b:7a:d0:11:c4:15:9a:c3:f0:e7:a9:3e:45:2c:0c:
4e:71:71:7a:78:b6:60:44:ed:5f:64:28:a2:d5:3e:f9:0c:e8:
34:14:16:2d:28:f5:e2:77:ad:39:08:6b:e2:a8:f5:19:f9:8d:
e8:10:44:20:dc:e9:60:7a:28:37:01:16:24:dd:a2:19:79:c4:
70:9a:cc:03:16:73:14:bd:0e:0a:01:93:cc:a5:4e:53:b6:1a:
b8:a4:a0:36:5b:73:39:e2:1a:a6:a8:47:b2:e5:62:37:a2:6b:
56:85:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:01 2025 by rpki-client