Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/1ab5db08-8436-34de-b9cd-ba8ab0da4d43.roa
File: 1ab5db08-8436-34de-b9cd-ba8ab0da4d43.roa (raw, json)
Hash identifier: cgwZHPcrFZpDGPms7Y9qW2EnRrbEw59TvqzSHtcV1tw=
Subject key identifier: 4D:32:F7:AE:AE:F4:0F:A4:49:37:EF:B8:A4:32:40:22:72:42:0E:A5
Certificate issuer: /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Certificate serial: 010D0C9F43285848BA564121782EF344E1D70080
Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/1ab5db08-8436-34de-b9cd-ba8ab0da4d43.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 16509
IP address blocks: 168.100.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:41:21:78:2e:f3:44:e1:d7:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=6d6d6a69-1de4-4c20-8959-071f36ea67fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:14:89:cd:be:f1:83:5e:b0:b7:e2:b3:ba:
d1:13:b3:5e:91:d7:5c:23:8f:c2:a8:52:04:64:ac:
31:3d:77:59:b7:10:b0:1b:eb:d8:30:a8:cf:49:99:
b1:27:33:9a:d8:da:54:3f:2b:6c:9f:1b:62:51:c4:
28:30:34:bd:8d:d7:49:20:c9:01:7a:57:5b:a8:40:
69:ca:41:92:68:0f:6f:bb:1c:86:8e:7b:e0:5b:28:
07:94:51:72:eb:e5:14:c3:cd:d0:e4:bb:28:d1:b6:
54:d1:09:bb:b7:5c:14:ac:bf:39:b6:6d:a1:af:2c:
4e:d9:f8:93:1d:b6:c6:e2:8a:7b:54:01:09:c6:dd:
38:97:05:24:38:33:98:ee:0d:08:9a:8a:26:6c:50:
b6:55:a5:14:24:d5:51:02:10:03:02:22:bf:13:62:
4c:9c:03:94:d5:e9:32:56:1e:8f:b9:f3:5c:50:b2:
d6:e3:bd:c7:a2:f0:5c:3c:d9:b2:7f:e3:ee:3b:41:
81:3e:6c:23:cd:33:c3:4f:84:4d:41:a8:f0:ca:db:
fc:e7:06:79:d6:50:1e:6a:70:20:6d:40:c1:5a:40:
81:d1:7a:1f:87:37:1a:d7:de:00:1f:42:c2:cf:53:
7c:c5:26:6a:08:f1:47:1b:47:43:8e:09:db:f7:69:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:32:F7:AE:AE:F4:0F:A4:49:37:EF:B8:A4:32:40:22:72:42:0E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/1ab5db08-8436-34de-b9cd-ba8ab0da4d43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl
X509v3 Authority Key Identifier:
keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:91:8f:d9:f6:5b:5f:c7:1d:83:a0:24:88:94:87:fb:89:cf:
e6:50:ff:58:c6:04:a7:0d:e4:97:63:72:34:46:c9:c8:a8:75:
9e:ef:b3:27:78:9c:ef:70:e0:13:fd:a4:dd:1a:20:5e:bd:6f:
47:dd:96:00:ca:2b:1a:2c:0b:a5:1b:a7:a3:dc:a9:2f:b6:23:
52:43:51:a4:b4:d8:0f:e9:0d:f9:ad:f7:77:52:8d:2e:d4:01:
fa:5a:df:c4:fb:46:03:7e:a6:3e:3d:3f:db:4a:ea:13:ed:a6:
a0:2b:65:0c:c8:ca:31:86:e1:07:b1:fe:e7:42:9b:5a:4d:19:
c6:c0:87:10:dd:ec:92:a2:0e:9f:d9:69:52:c2:ce:36:9e:73:
b4:0d:15:f2:4d:82:b8:8c:d9:e8:14:1f:83:99:88:ad:8e:3c:
71:7a:72:2f:64:78:26:b5:ae:02:58:3f:25:d6:f8:7e:22:a9:
9a:76:2a:93:90:a7:20:cd:fc:15:81:62:3b:c1:36:19:c2:13:
1f:23:ab:71:e7:bf:3d:aa:16:a3:21:e5:bc:01:08:60:5f:a4:
31:8f:18:b9:25:a6:88:32:3c:30:0c:ae:24:90:c5:ac:31:bb:
09:71:30:09:00:de:92:a2:28:d1:ac:e0:4a:f5:da:1b:8c:6e:
41:3f:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:45 2025 by rpki-client