Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa
File: a92ebafa-35d6-34e6-aa72-020e917be372.roa (raw, json)
Hash identifier: gXMW8b4ehsToXBAhWunzp45+VP3HUOwEy0M2m/WopaU=
Subject key identifier: 27:E2:B6:5A:81:D4:00:0A:A0:A8:7C:7D:88:BC:56:6C:9B:2F:66:F9
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F43285848C150D26A3E213ED395AB6780
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 165.225.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d2:6a:3e:21:3e:d3:95:ab:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=168312ee-8f9f-4707-a3a8-a35711cfc93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:21:27:a7:57:4b:98:1f:9e:ee:fc:d3:26:
f4:88:06:1d:7e:c3:43:10:b4:2c:b6:3e:66:5c:08:
06:02:ca:b2:85:5e:53:f3:62:ee:49:0e:17:d2:af:
da:9b:db:03:97:e9:1a:3a:1b:bf:cb:e6:74:e4:5a:
49:e6:7a:18:65:ac:7f:65:66:9b:a4:6e:ae:20:03:
70:fe:f4:fe:3b:46:89:09:f4:bf:07:a2:92:42:98:
ac:cf:a9:2c:5b:1b:cf:56:11:d9:7d:c2:a1:ee:8c:
3e:94:da:b2:72:ff:34:58:e1:48:65:10:78:7f:90:
e3:f9:e6:08:4e:da:5d:08:c5:39:8c:db:1e:40:65:
20:e6:85:d9:a5:72:0c:17:7f:63:db:65:4d:6e:3f:
e6:8c:68:b3:50:4a:99:65:e6:55:4b:52:06:09:1d:
a1:ce:e4:d7:70:02:d1:8a:40:2d:2a:60:1f:ad:29:
cd:8a:af:ef:e6:a2:0a:18:a1:a1:af:d2:ac:25:66:
f5:85:0b:cd:b7:64:c1:13:90:63:32:09:b1:46:2a:
cb:a5:c0:03:5b:f0:9f:54:e8:74:e1:c1:fa:f1:b5:
8e:5d:85:98:56:8f:db:a1:af:30:14:f2:9c:12:ce:
d1:f9:ef:8c:7d:6d:db:65:01:82:a0:96:c9:22:eb:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:B6:5A:81:D4:00:0A:A0:A8:7C:7D:88:BC:56:6C:9B:2F:66:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
165.225.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:6c:6a:bd:ff:04:c2:4c:54:ad:7b:2a:67:67:8a:33:0a:a0:
b3:42:91:81:96:da:12:36:d0:5a:96:a0:2d:e7:5a:0b:84:7c:
8a:0f:bb:e4:61:22:e1:93:33:11:ac:7c:46:67:7c:c4:42:dd:
7d:2d:1f:69:ea:a4:f5:06:3f:8a:ec:87:69:ed:e5:18:9a:88:
76:90:74:71:22:54:c0:51:66:83:9f:33:c5:90:31:df:91:62:
41:72:a1:36:c3:0d:4e:16:cd:24:e1:00:6a:44:1d:f3:42:83:
ef:f1:be:e6:eb:bd:dc:cd:59:e7:c8:df:e2:a7:b6:4b:25:53:
31:34:c8:4d:46:57:81:df:95:8a:fc:5a:de:d8:74:a4:ce:ae:
64:b1:96:2a:5d:09:e8:bc:5b:2d:dc:a0:0f:cc:7f:5d:e4:67:
32:27:99:dc:aa:ae:87:e5:fe:23:4d:a5:b8:d8:71:72:e4:19:
5f:ec:70:59:f8:71:ee:e4:4b:8d:00:de:12:b3:16:8f:53:8c:
f6:6e:ab:d5:30:11:9e:41:92:c3:30:52:87:29:d4:4e:32:c1:
4b:63:b8:d8:78:e4:eb:be:d5:c9:3f:3e:cc:ce:2b:73:52:88:
78:9d:b2:fc:04:b3:43:63:27:44:96:97:8c:a0:f2:26:b5:0e:
ae:40:9b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:50 2025 by rpki-client