Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
File: 5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa (raw, json)
Hash identifier: 70693Ztu5uzWfc4PgF58P7v9EwePE6VKrcZVUsnqZ5M=
Subject key identifier: 47:B4:7A:B4:FB:20:80:BE:22:3C:B5:AD:60:28:3B:37:F5:40:CA:50
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F432858480EA50106F129D328E3958C80
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 1299
IP address blocks: 148.188.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:01:06:f1:29:d3:28:e3:95:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=b9753bf8-5b03-4f4c-bcba-341d50f0fe23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:be:49:97:bf:f7:03:ec:b9:a3:b4:74:49:
9d:da:ca:3e:2a:6e:1e:7d:1f:58:49:af:c4:be:89:
e2:9e:6c:d0:82:70:5a:ca:cf:57:92:d6:c9:be:0b:
04:c7:54:85:06:5e:5e:9f:9c:a2:21:46:5f:34:23:
6a:5e:47:f0:86:7c:f2:30:bd:f6:d0:43:37:e0:40:
a0:99:a4:86:26:40:f4:07:4b:27:d3:8f:e7:26:f0:
90:01:26:77:79:ee:4c:e5:b3:20:04:3a:4f:f1:c1:
a3:e0:c9:0e:1f:73:e5:a8:4e:04:71:96:a8:86:5c:
e4:7a:ab:51:8c:64:ff:74:b3:96:df:a7:84:77:ea:
d8:c3:11:7f:21:e0:80:a6:0d:e7:e7:80:74:ad:5b:
4e:0a:a6:72:52:35:a2:22:15:90:c7:e3:d6:69:af:
3f:b1:d0:bc:5d:7c:40:3f:5d:78:0d:7f:74:bc:56:
f0:63:06:28:25:a6:08:29:a0:df:55:00:d5:03:1b:
e6:f8:77:ed:a1:e7:48:9b:86:00:b8:95:a1:ba:ae:
47:c8:4e:74:9c:55:7d:80:d6:2e:08:08:e6:47:85:
53:53:1a:74:13:b9:b0:e4:a7:78:44:fa:97:8b:7d:
07:cb:0e:4e:c5:0c:8f:f8:c0:c9:03:40:5b:19:c9:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B4:7A:B4:FB:20:80:BE:22:3C:B5:AD:60:28:3B:37:F5:40:CA:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5d:30:b8:e9:6a:9d:9b:4f:a5:33:e7:95:2a:7f:3b:63:e2:
11:44:a5:26:59:56:09:21:13:cd:e9:c9:b2:b0:51:be:1a:39:
52:c3:a7:58:49:4d:8f:0f:82:5c:71:5f:14:75:9f:57:71:cc:
9c:be:2e:65:a8:3a:18:6f:35:d5:81:28:c2:38:41:ef:03:b7:
01:c6:5e:9c:96:1a:32:3d:7e:2e:fd:09:d7:b2:9b:a2:8c:f9:
6f:0a:f7:f0:09:a6:49:80:45:db:45:21:70:45:3b:ec:da:d2:
13:bd:3a:e4:39:19:28:1f:8e:27:3f:3a:bd:8f:4e:8a:ed:03:
e0:5c:5a:b1:a0:10:29:aa:c1:f0:d0:af:77:1d:9a:69:b6:d8:
d8:26:49:c9:e3:f9:13:cc:1b:54:1a:f7:98:a3:ab:d0:e0:85:
15:cc:a6:d0:52:47:49:8a:db:02:a8:de:b0:dd:25:cc:b0:8b:
45:98:0c:98:91:fc:e7:17:55:0a:7b:b3:4e:6c:df:32:eb:a7:
6d:a5:73:50:ea:4f:90:ea:99:d1:ad:4b:7e:6f:62:27:52:ac:
39:71:cc:ef:76:ff:90:c7:81:3e:24:66:ba:6b:5e:74:f7:6a:
a6:14:a0:96:0b:47:26:71:2d:cb:f0:15:72:db:7d:fb:bb:f5:
84:72:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:22 2025 by rpki-client