Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa
File: c85b3eda-5f77-368f-8183-14bcda949a05.roa (raw, json)
Hash identifier: 9oTTI676YQ/B+mXkToVPtFmD50oU8aajf1f/DbjLAf4=
Subject key identifier: 92:96:C2:CE:10:05:D0:3A:06:63:3A:63:36:E2:3A:FD:E4:5D:9B:C6
Certificate issuer: /CN=91ace6e0-bca2-4daa-81c3-2e936814cc5d
Certificate serial: 010D0C9F43285847FF4A4233929BCCAC1473F180
Authority key identifier: E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 11817
IP address blocks: 148.59.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:42:33:92:9b:cc:ac:14:73:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ace6e0-bca2-4daa-81c3-2e936814cc5d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d6013387-54d9-4c00-bfae-d5409582d2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:76:85:7b:d6:d8:13:b6:90:8b:cb:eb:fa:
e1:b7:16:e9:9b:bc:f2:d0:32:73:e4:3d:a6:e7:5b:
3f:64:f8:4e:91:0c:2b:a5:89:75:27:4c:22:43:f7:
f1:4d:83:b4:4f:e0:b1:d2:dd:95:2c:63:1e:4f:4d:
77:8d:ee:2a:80:9d:e5:4e:59:41:0f:6d:e6:38:99:
05:23:c5:ed:ef:8b:bb:61:68:11:ca:a1:ab:60:49:
59:6f:07:8a:57:1c:3a:a6:fd:8f:65:e4:1d:4e:69:
c6:f9:ae:97:d9:32:04:64:7a:27:1a:56:9e:d2:71:
49:5b:88:ad:2c:6a:47:1c:77:24:59:49:f9:39:4e:
c3:a7:ba:b9:3e:49:74:35:d7:b9:89:70:04:58:6e:
57:c2:8b:e4:10:6c:ab:19:d2:bc:d6:79:fd:ea:ed:
68:95:30:8a:8e:f6:48:1a:72:10:8f:92:cc:ce:95:
c2:32:be:ca:cf:02:84:48:d6:5b:58:f1:15:a0:6a:
5c:84:aa:e4:28:09:6e:60:6d:98:c9:d3:4b:cd:bf:
9b:84:d3:0b:fb:91:16:54:b4:53:8c:86:7c:d2:1b:
c0:03:4d:38:be:d8:47:86:dd:df:6b:39:ad:c5:38:
b6:75:e6:68:25:59:fd:2b:24:b6:17:30:5c:56:82:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:96:C2:CE:10:05:D0:3A:06:63:3A:63:36:E2:3A:FD:E4:5D:9B:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.crl
X509v3 Authority Key Identifier:
keyid:E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:b0:17:7d:cc:89:13:59:d6:bf:38:5c:4b:48:67:b3:6d:71:
c8:02:55:99:fe:0c:d2:1f:c0:39:b8:ef:99:f3:49:d1:7c:0f:
10:26:66:a0:ee:c2:62:7f:84:90:d1:88:61:ab:c6:7f:86:d0:
2b:1d:7e:f0:13:de:c7:30:b9:e4:b7:38:ad:bc:82:a1:5d:ea:
fb:21:b7:d4:5b:ed:2f:19:61:11:e9:48:4a:f2:d0:cf:9c:16:
ac:b7:38:9a:67:1a:30:63:62:1b:3e:e7:3c:ef:81:6e:d4:1e:
fc:dd:ea:fc:f0:f6:f6:04:17:4d:aa:77:be:7b:b8:c6:97:77:
38:32:d3:3e:1a:80:53:20:a4:38:49:22:c7:40:b5:6d:a0:3b:
9c:8b:4a:24:bd:96:51:36:a6:3c:a4:c0:e0:7f:68:88:f2:32:
df:ad:cd:e0:a3:74:7c:58:82:ba:77:6a:86:f7:7b:f4:4b:99:
df:c9:3c:23:be:56:6b:f5:71:ab:f1:8d:dc:5a:ab:83:5d:68:
47:a4:ac:b3:24:25:92:ed:22:38:21:51:ee:54:91:67:d3:c1:
34:68:8a:6e:0d:35:8f:06:df:1b:01:99:4e:fe:a9:80:f7:bf:
e0:21:a9:48:08:b5:22:7a:92:99:05:13:5b:61:04:6f:84:fb:
16:ec:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:37:29 2025 by rpki-client