Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa
File: 00f44ccb-b32f-33ba-8188-efb6deda08f8.roa (raw, json)
Hash identifier: m50Gs3TK/CqPbKuUp+knAv4e0gq5F4Eb1aMtQL5mDTA=
Subject key identifier: 97:DC:E8:8C:33:73:45:EF:DB:20:76:6A:40:72:9D:CA:B8:5C:BC:19
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858486C2B15205F9B696AD9A840E0
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 54004
IP address blocks: 144.168.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:15:20:5f:9b:69:6a:d9:a8:40:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=2ff0dce7-3027-46ef-af04-fc78ab6c72db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:18:4e:08:c2:f5:95:67:0b:b3:9e:78:a9:
55:80:f9:ed:be:5a:41:00:a5:09:1d:68:4a:cf:2d:
11:ae:a6:bc:58:72:93:95:7e:ca:d6:64:5a:1b:36:
8d:21:1c:b2:d2:d1:40:62:7f:7f:8d:44:ea:b0:5c:
fc:79:2f:ba:35:61:f4:4b:1e:7c:07:27:4c:52:29:
ca:49:f8:c5:62:18:14:b6:bc:4f:2d:6e:86:79:c6:
d6:03:a4:a4:0e:2a:5d:18:bb:79:d4:59:94:63:f2:
6d:af:05:73:e2:df:85:ac:19:4a:7f:b6:8e:f9:88:
62:be:07:21:e1:33:f6:6b:8f:ed:e6:4e:f8:3b:8e:
3c:be:6d:56:ad:e0:80:08:a4:17:06:27:04:e1:a8:
a9:ee:8e:9f:dc:59:12:c6:a2:57:91:42:df:55:6a:
5e:e3:c0:f5:52:f3:a0:c7:8d:ee:ae:ed:e6:74:01:
37:91:a7:f7:e5:93:21:0d:5e:93:3b:4f:47:1d:8f:
da:5c:e9:c9:c5:36:5d:5d:0c:4e:c5:10:e2:31:eb:
6c:06:43:b2:46:49:64:19:d6:71:d1:9d:e6:59:17:
34:01:8e:0a:f4:85:a2:f8:0d:89:ca:24:32:76:5e:
01:82:60:69:c1:21:21:a8:79:88:66:ed:02:1d:d6:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DC:E8:8C:33:73:45:EF:DB:20:76:6A:40:72:9D:CA:B8:5C:BC:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:07:15:5a:4b:cb:28:5c:d6:2b:98:1c:6a:b8:18:98:db:4d:
76:5f:8d:e0:bb:fa:b6:f8:e7:56:46:29:92:36:a7:28:68:c9:
08:e1:49:51:12:20:83:d0:d9:45:b9:f8:ca:6b:a3:3d:33:0c:
0a:dc:d0:e5:7c:23:1d:bd:da:bc:d3:0c:1f:5d:04:7f:12:d3:
a6:00:f5:b3:53:0b:4c:e2:9c:dd:9f:09:63:33:c0:a9:91:fc:
e7:cb:03:62:55:62:ad:9f:d2:7c:36:55:fb:33:57:31:12:9c:
cf:c9:22:33:19:98:d2:58:8e:38:d2:da:e1:e4:25:05:e0:4f:
25:56:f1:ca:9d:a6:20:1a:be:98:94:e6:f0:61:52:de:22:93:
bd:a9:9a:09:26:86:6a:9b:13:92:72:11:5c:cd:80:f6:8e:cb:
1f:99:f7:d2:80:fa:44:2d:eb:35:6e:64:1b:22:62:b7:8b:92:
ba:f9:1f:f4:38:b7:5e:1f:fd:fc:df:74:be:fa:b4:92:10:f1:
e7:0c:2b:dd:60:46:0c:75:8f:e2:34:4d:fb:20:15:89:d3:22:
0f:45:31:74:f4:76:14:5b:a4:02:de:9b:27:93:eb:58:9c:6b:
e9:68:ff:64:c7:d4:3c:a7:5c:f3:d9:ed:c6:b1:c5:c1:91:e3:
64:3a:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:44:09 2025 by rpki-client