Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa
File: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (raw, json)
Hash identifier: R7dDoB5GvZI58ro7TbpsMHeJ/RrCFmp2H9GA1Q7k3Hs=
Subject key identifier: 2D:7A:1A:AE:8E:43:32:68:C6:2F:AE:95:E6:4D:41:02:9F:B4:CC:D3
Certificate issuer: /CN=A91301EE0000/serialNumber=54E7DA9AF2D4605C4E4668D244019059213DEB77
Certificate serial: 06B359053D3602710AC2EAEA5CBA17440CBE4A85
Authority key identifier: 54:E7:DA:9A:F2:D4:60:5C:4E:46:68:D2:44:01:90:59:21:3D:EB:77
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VOfamvLUYFxORmjSRAGQWSE963c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa
Signing time: Tue 27 May 2025 02:17:21 +0000
ROA not before: Tue 27 May 2025 02:12:21 +0000
ROA not after: Tue 26 May 2026 02:17:21 +0000
asID: 401682
IP address blocks: 165.99.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b3:59:05:3d:36:02:71:0a:c2:ea:ea:5c:ba:17:44:0c:be:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301EE0000, serialNumber=54E7DA9AF2D4605C4E4668D244019059213DEB77
Validity
Not Before: May 27 02:12:21 2025 GMT
Not After : May 26 02:17:21 2026 GMT
Subject: CN=2D7A1AAE8E433268C62FAE95E64D41029FB4CCD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:32:67:06:d4:2e:d9:6a:73:b8:1a:89:23:
fd:83:23:09:a7:85:a6:d7:55:2d:74:f9:ed:77:a3:
5f:26:bf:e3:d2:ee:cb:a8:fa:f8:e6:c7:21:cf:97:
98:a1:26:ca:5a:f6:97:d5:a7:7e:48:3f:a8:6a:d4:
b2:c6:a1:8e:ab:16:31:71:b0:8c:6e:fb:47:a9:0f:
e6:cb:37:f2:ef:2f:94:ab:4d:a3:83:0a:ea:6c:30:
91:3f:7c:bb:af:3c:f0:c5:3b:48:15:4f:3d:eb:85:
0a:69:85:be:ae:cd:a6:7e:1c:0a:14:50:87:99:46:
ad:48:3b:de:bc:8d:5d:ee:7c:34:26:46:f6:3c:ac:
24:f9:03:0e:f8:dd:63:63:49:87:d4:49:15:7c:93:
db:77:67:45:d0:d9:47:94:56:03:7b:f6:e3:d9:7d:
ad:f4:73:b0:ba:2b:16:b4:7b:f5:76:11:01:12:ea:
28:0c:50:b0:d7:ac:2d:40:7b:a0:0c:97:bd:cc:95:
13:36:ae:99:6a:d8:08:f2:55:41:95:2c:05:7f:6f:
d9:87:80:af:5b:1c:b8:44:af:06:08:b3:3f:54:cc:
c1:9d:08:c1:3c:3b:29:b0:7f:fe:63:98:1b:4e:51:
bb:d0:0b:e9:63:c1:67:57:6c:3c:c9:bc:73:16:ce:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7A:1A:AE:8E:43:32:68:C6:2F:AE:95:E6:4D:41:02:9F:B4:CC:D3
X509v3 Authority Key Identifier:
keyid:54:E7:DA:9A:F2:D4:60:5C:4E:46:68:D2:44:01:90:59:21:3D:EB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/54E7DA9AF2D4605C4E4668D244019059213DEB77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VOfamvLUYFxORmjSRAGQWSE963c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.99.124.0/23
Signature Algorithm: sha256WithRSAEncryption
43:6e:82:98:01:c2:c4:ce:29:96:f6:6d:90:58:b2:3f:22:fc:
92:7f:d7:2c:6a:1f:44:40:91:78:0b:97:36:c1:0a:4d:5b:1e:
91:2b:a2:f1:61:35:d2:fb:db:66:b2:1e:41:17:15:00:93:d3:
ab:3a:76:2c:cb:31:fa:ea:23:56:ea:40:10:35:a7:42:0e:9a:
2a:71:e9:20:2e:56:5c:50:04:3f:ae:e5:24:8b:4a:dd:6a:92:
22:af:e2:e5:ed:06:6b:ad:01:a8:04:31:90:d9:ae:3f:64:ba:
64:bd:c2:01:3f:c0:c4:0c:fb:49:bd:b3:60:cf:a2:0f:34:f6:
7f:0c:44:46:c1:e6:8a:21:fc:c4:8d:06:06:9c:24:b0:a6:9f:
ac:50:2f:ac:8b:d4:df:52:de:81:b3:aa:fb:fb:57:39:26:8b:
4c:26:3f:f7:f0:f8:8d:d9:f6:6b:d2:fb:91:c1:a3:27:30:35:
83:85:bc:61:5f:53:ce:71:83:31:bc:f0:ee:a9:ec:1f:4f:5b:
e6:16:27:82:69:1b:1a:65:ac:49:d5:15:19:f4:4a:a1:09:35:
7b:68:41:7b:51:51:fb:fa:b3:f1:54:b8:71:fa:72:f0:ed:88:
14:43:50:85:20:ac:b1:a4:c2:02:eb:5b:35:8d:69:5b:89:38:
6e:27:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:30 2025 by rpki-client