Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
File: 03982157-61b3-3065-ae38-53829dc9dce4.roa (raw, json)
Hash identifier: X/GA8cr9yBLlUgV5r0q98bsLXXyW9J/iIOIMiGKvC1k=
Subject key identifier: 53:77:4C:7A:DE:E8:1D:5C:19:D2:9D:44:E6:CA:78:D3:AC:60:03:E8
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F43285848100A73940680E5161ED23A80
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 56308
IP address blocks: 148.188.240.0/21 maxlen: 21
148.188.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:73:94:06:80:e5:16:1e:d2:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=390ddc3d-ba29-4f45-bf86-355c7eb901f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:9f:3d:80:dd:d3:44:da:d7:ff:dd:1f:b0:
36:2a:60:93:4d:b5:66:2b:ab:e9:4d:c3:af:52:2f:
a0:b0:bf:ed:b9:f3:2a:f1:0a:83:93:ab:b7:70:9c:
09:e1:27:81:15:d4:a3:fe:cd:16:9b:7b:ed:8a:ab:
3c:ed:45:b8:b4:f8:e7:dd:36:df:90:50:c2:b1:1a:
ba:21:f7:dd:0c:02:5d:19:8a:50:c2:dd:05:4b:d6:
08:78:bc:a1:cc:30:10:66:75:6e:36:47:c6:54:1d:
ee:e5:7c:5c:3e:6c:a5:4d:75:0e:d5:03:91:4c:3b:
0b:0d:37:87:aa:5d:b4:d8:eb:34:6e:ab:59:5d:0e:
71:1d:d2:aa:93:8b:d9:a2:35:9e:59:70:1d:68:28:
9d:08:10:bd:ce:bd:78:ad:70:3d:ee:9c:85:f9:2d:
19:5e:e8:2f:75:9b:5e:28:76:bf:ae:24:84:5d:db:
ce:7f:6f:74:13:68:7b:d2:50:31:fd:ca:97:6e:3d:
47:b8:cd:a4:31:9e:9a:9f:0a:ec:68:fa:b6:a5:26:
24:ea:4a:36:c5:26:f1:b0:f8:cb:d7:cd:87:2f:b1:
d1:fb:49:05:a0:64:7a:aa:db:df:c3:a7:bb:bb:9f:
4c:c6:bf:21:57:b3:67:94:ce:32:37:9c:ed:9d:2c:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:77:4C:7A:DE:E8:1D:5C:19:D2:9D:44:E6:CA:78:D3:AC:60:03:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.240.0-148.188.251.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:17:c2:2d:77:af:ed:39:4f:27:1a:6b:2e:7a:8a:11:4e:c1:
ed:1c:4a:ae:db:dd:9e:29:6e:58:00:02:25:fc:54:3e:35:87:
1c:34:a4:09:ac:35:d5:fa:c8:98:cb:37:84:44:bc:0d:9d:46:
24:06:d0:ba:86:ed:14:1e:e6:db:da:8e:ce:61:42:29:9b:f5:
32:39:19:f0:96:5a:ba:ad:98:50:a1:a6:f3:4a:f4:65:25:0a:
c0:0b:32:99:f0:51:2c:d1:cb:6f:ab:d3:f5:5c:64:ea:bc:52:
4c:55:92:c6:2f:7b:99:dd:e8:3e:b6:9e:a9:e4:4c:21:ae:bd:
98:cf:ec:cb:d7:ee:c2:e7:eb:98:9a:6a:a0:70:8f:3e:06:e8:
90:ff:47:01:4f:3a:e9:b7:a3:bd:a2:99:6e:53:8b:e5:f7:70:
1f:b2:d7:27:fa:7d:72:ea:41:af:db:d8:38:17:ae:07:96:e3:
8f:7a:7d:97:bd:5e:f7:aa:26:62:bb:b5:59:35:f3:c1:87:d8:
de:37:a9:96:0a:36:1e:fd:34:7a:e4:13:f2:d9:d9:ac:14:f8:
0e:3a:43:67:c8:59:65:90:e5:23:51:bc:ac:95:75:94:94:79:
e9:77:29:85:94:c1:27:6a:b3:3a:3e:de:f1:f4:ae:cb:18:ee:
04:dd:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:25:41 2025 by rpki-client