Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json)
Hash identifier: 9/4/rL7gy/XAfXHBvgSgOGD07aJv0Izv48rCDBKi2Q4=
Subject key identifier: 6A:77:C6:AB:53:59:E3:B7:2E:36:98:51:32:51:83:A5:0F:E6:FA:64
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F432858481AC2B19C66FB546042320C00
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
Signing time: Thu 05 Dec 2024 10:10:11 +0000
ROA not before: Thu 05 Dec 2024 10:10:11 +0000
ROA not after: Wed 05 Mar 2025 10:10:11 +0000
asID: 15404
IP address blocks: 148.188.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1a:c2:b1:9c:66:fb:54:60:42:32:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Dec 5 10:10:11 2024 GMT
Not After : Mar 5 10:10:11 2025 GMT
Subject: CN=d755a454-6670-4e89-b9bc-527ddcf9aded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:e3:4d:78:4e:64:48:75:84:43:9e:20:31:
c9:e2:5f:c0:c4:d5:4c:dc:f1:35:ed:22:fb:cf:13:
b5:df:1a:50:97:d7:21:ae:90:13:9e:a0:ee:f6:90:
36:6f:72:45:ea:fd:e6:98:d9:f1:97:b1:35:e9:99:
c6:18:71:24:ed:78:73:3f:50:bf:2d:69:8b:34:3c:
18:73:78:d4:e2:c8:55:49:6e:5c:96:29:45:c3:1c:
c6:65:83:69:05:f0:6e:4c:b9:92:ad:b6:22:0a:f3:
76:73:0b:47:f7:d9:f4:5d:9c:69:a4:81:65:d4:40:
a4:79:9a:9e:cd:13:f9:dd:2d:65:8d:ff:b0:f0:d3:
3b:2f:23:2d:b9:81:be:e7:1e:43:cf:a3:75:8d:bd:
5c:c4:e3:f7:d6:80:7c:0a:a7:e8:d6:70:86:6f:96:
5e:fa:65:e0:90:5f:ee:b7:66:39:2c:eb:7c:4a:2a:
14:b2:ec:2f:7c:e3:30:fd:00:7e:18:8b:12:a9:08:
c2:dd:75:fb:e7:ca:2d:8c:f6:47:6e:c4:ca:f8:0d:
74:5f:0b:73:08:6f:32:58:4f:8c:ed:09:af:b8:3c:
bf:9e:a9:c5:53:31:d4:61:95:f1:be:7e:30:0e:79:
69:d0:d9:70:13:70:b4:e3:12:f0:2a:66:87:63:15:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:77:C6:AB:53:59:E3:B7:2E:36:98:51:32:51:83:A5:0F:E6:FA:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:0b:6c:16:f0:e3:48:5a:71:6f:e6:f1:e8:c6:bb:51:1f:90:
b1:c3:6f:8f:ff:ed:fb:af:da:c3:66:43:13:3b:8a:3b:60:3b:
5b:0e:ee:8d:b4:4c:09:6a:44:64:c9:15:13:0f:dd:d5:3f:0b:
f3:68:7c:30:f1:a5:75:36:98:6c:fc:b9:f6:c5:76:22:f0:04:
9f:df:8d:68:54:cb:b6:7d:c7:d5:d3:0c:23:05:8b:23:5a:a4:
43:ce:d6:40:4a:5a:03:66:ce:a6:3b:2b:02:d9:d8:5f:62:98:
10:5d:0a:b0:7b:b0:14:54:56:f7:d4:08:ed:75:b2:7b:c3:a8:
01:89:5c:98:6a:27:dc:7b:51:c2:a6:30:a8:b3:c2:55:38:4b:
ee:6e:1e:1e:b3:56:39:43:ce:96:ee:df:a4:6a:62:2d:10:a5:
a7:54:59:58:7c:91:31:52:5b:d2:1a:c8:53:f0:08:5e:b0:48:
66:51:af:10:50:e6:73:85:af:1f:89:f0:a6:65:da:25:83:2f:
66:ae:13:3f:0c:14:65:74:00:4b:b8:5b:e6:bf:08:c5:55:e5:
fa:88:e4:31:a7:d3:76:8a:9f:20:a0:b2:3e:9b:53:2c:58:ca:
06:a6:86:36:3c:0b:09:7c:59:c0:01:a2:59:50:4a:bf:6f:84:
4b:8b:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:56 2025 by rpki-client