Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa
File: d0812d54-f0d3-311e-83ad-e1bce560e63f.roa (raw, json)
Hash identifier: 19wv/BKsOnWPruOvY0tz87/UHpYPEnjHwtULmHXHrtY=
Subject key identifier: B8:82:BB:DC:79:5C:F6:3C:DA:13:0E:35:DB:BA:9D:11:8D:30:13:67
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F432858480EA501206F29CADE5DBB2880
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 15404
IP address blocks: 148.188.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:01:20:6f:29:ca:de:5d:bb:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=8085843a-5074-4d16-85e1-c8f521aec72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:31:34:8e:18:01:a5:3c:59:6e:2d:38:43:
96:6c:a6:19:e9:8b:ad:40:59:e8:8c:dd:f4:09:39:
f0:db:4f:b3:ec:ba:be:7e:31:8c:15:e2:4e:64:43:
75:d8:00:19:de:db:b6:36:a0:6d:b2:a7:60:6c:01:
e7:78:e3:73:62:04:10:ad:dc:47:33:25:22:0f:bc:
90:39:fe:b6:f1:72:9c:b4:f6:ce:4d:1a:82:d0:0a:
64:65:de:b0:28:d7:8c:82:d5:00:b3:1f:14:b2:6a:
28:d3:84:72:9d:dd:87:68:88:65:0f:f1:49:c7:93:
40:01:89:74:84:94:0d:22:32:99:6d:23:42:93:5b:
0d:9c:c4:0d:fd:22:55:5f:2e:e8:e1:06:a2:36:59:
ac:2e:48:61:d3:9f:e2:0d:02:97:c8:ed:7e:dd:07:
c9:4f:1a:c9:18:3e:02:1c:99:18:9a:f3:b1:06:fb:
d3:a4:7f:8c:79:56:34:2e:1c:55:8a:70:ec:e7:83:
ca:1c:57:63:c6:21:1d:3f:28:6a:90:b0:1c:40:81:
04:6e:94:4e:13:b2:2a:aa:69:e1:d4:43:e2:b0:b7:
62:10:bc:52:a4:00:c1:6d:66:92:89:16:16:48:d4:
58:cb:09:e3:17:7d:5b:d3:eb:e7:ef:7d:7c:aa:f9:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:82:BB:DC:79:5C:F6:3C:DA:13:0E:35:DB:BA:9D:11:8D:30:13:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b3:50:69:93:54:d5:f3:e4:58:ae:53:5d:b8:d1:33:98:75:
7d:db:50:70:ef:27:2e:93:f3:9a:8b:cd:ed:90:45:a2:89:a7:
59:c0:79:33:c4:90:70:db:0e:bb:22:83:4f:0e:c7:90:76:40:
08:5d:87:fc:d1:3c:de:62:7e:8c:68:16:99:32:32:33:97:66:
e4:2c:ef:48:db:c9:83:e4:55:a5:ed:53:7a:fb:65:f0:e0:22:
2b:16:b9:19:9d:bf:a4:5d:c1:ab:40:e5:7d:3e:51:42:a7:2f:
dd:e4:f6:7c:c7:cb:dd:30:a8:1c:c0:93:10:44:84:a9:a4:67:
b5:92:ad:68:b3:e9:92:23:53:27:81:63:38:a4:bc:9d:71:df:
8f:82:89:79:85:6f:f7:63:f6:ec:d3:c2:5b:6b:47:30:53:94:
10:c9:0a:1d:c6:84:8a:6d:1e:66:18:ec:6d:00:f3:66:cd:34:
15:20:27:ba:e6:8b:14:4a:ca:f8:59:12:a1:dd:6d:87:b7:58:
71:7b:23:6a:9f:a5:c7:f6:f0:15:a2:f3:e1:69:27:1c:22:66:
57:fa:4d:5f:83:2b:8e:9b:1c:2a:6c:7e:09:1a:bb:3f:c6:81:
9d:1b:73:3a:e2:15:3e:80:98:00:4e:a3:04:80:ff:66:b2:01:
26:ad:12:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:22 2025 by rpki-client