Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/60b44bea-c691-36a0-b009-09a56f382c44.roa
File: 60b44bea-c691-36a0-b009-09a56f382c44.roa (raw, json)
Hash identifier: ehChddSJxHoQVK6QyapNdmqMHfi3g+yLMT6eA+C0FXg=
Subject key identifier: CB:EC:0E:61:DF:D1:3A:BD:5C:C3:F0:C2:94:AB:E7:FF:BE:EC:BF:47
Certificate issuer: /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial: 010D0C9F4328584961B9944969FF25C57481C540
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/60b44bea-c691-36a0-b009-09a56f382c44.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 400423
IP address blocks: 148.76.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:94:49:69:ff:25:c5:74:81:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=6b74a2c3-257e-4f82-9225-5fb42a55e7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:15:4a:65:fb:6b:48:bc:fe:11:40:cc:7c:
e2:66:e7:de:a5:79:65:6a:e1:db:36:00:88:d2:7c:
0a:0d:3e:e3:9b:ed:b8:c0:13:1e:40:9c:01:aa:e3:
07:f5:32:16:26:c0:06:41:48:ad:a9:fd:d8:e8:f7:
b1:ff:51:30:cb:fd:28:0f:b4:89:aa:f1:f5:8b:de:
71:a0:d0:26:23:48:2a:9f:3d:d1:3d:3a:af:23:6e:
78:4b:d7:e3:11:7b:a5:79:6b:0e:00:45:66:87:b5:
b0:66:6a:5d:dc:a4:5d:24:7a:2d:ce:4b:d0:62:e4:
62:88:2f:a6:5a:0c:fb:ff:a1:3a:9e:64:cf:56:01:
ea:a5:be:49:16:b7:59:13:02:6a:0e:24:38:e6:12:
79:77:ad:df:f4:0f:8e:c6:0c:45:32:2a:ec:54:f1:
a9:36:73:a4:64:0a:e2:66:e1:a6:d8:1c:1e:c0:21:
9f:eb:73:7e:51:89:06:46:5a:35:19:e1:90:3f:45:
56:22:ae:ff:5b:b3:a1:4c:16:67:56:31:90:c3:8d:
50:57:1b:11:11:29:37:3d:87:e3:aa:1f:7f:fb:12:
12:1a:19:38:b6:be:ae:21:42:61:ee:fc:3f:ec:b6:
42:fc:69:96:cc:b2:89:01:0b:99:fc:5f:44:73:59:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:0E:61:DF:D1:3A:BD:5C:C3:F0:C2:94:AB:E7:FF:BE:EC:BF:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/60b44bea-c691-36a0-b009-09a56f382c44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
X509v3 Authority Key Identifier:
keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
sbgp-ipAddrBlock: critical
IPv4:
148.76.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:2d:e1:df:cd:0b:75:fb:66:cb:a8:28:6f:09:e8:45:3e:ff:
49:5a:23:70:67:12:d1:21:78:e9:05:bb:fc:a7:fc:07:01:17:
b8:d7:2d:bf:1e:c6:10:5b:0c:5c:6f:55:5e:95:b2:45:87:c3:
74:ce:82:cf:5f:a0:46:0b:57:1d:00:76:07:05:01:e3:ff:b6:
bb:4d:0f:ae:62:7a:7b:f8:a1:55:70:a4:a3:ed:e0:f5:9f:a0:
df:e9:58:4d:d2:d6:98:d9:45:00:39:fb:ec:ad:ad:9e:d4:bc:
57:d6:b9:a9:d1:fa:5d:cd:2e:5d:7c:de:1c:8f:0c:3f:7a:22:
c9:e4:aa:38:ae:ce:68:32:73:f2:46:93:55:4e:05:5d:04:cb:
64:7c:11:9a:06:9b:84:1e:49:78:cf:7c:20:95:c6:22:74:c1:
7f:3a:86:5d:3d:d6:c1:01:cb:07:6a:db:c4:6f:b5:23:92:a6:
49:88:86:d0:c5:0c:00:c3:be:0f:8a:dc:f6:ea:ef:d4:55:c7:
cd:4c:aa:83:8e:94:3e:d2:25:4d:a5:ef:df:44:f3:db:03:69:
0e:e7:c5:1a:4b:60:39:00:fa:15:6d:68:55:5d:47:15:68:fa:
bc:c0:b6:ea:1d:6e:ce:1e:58:9c:ff:4a:53:1a:a6:36:a9:27:
50:4d:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:41 2025 by rpki-client on console.sobornost.net