Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
File: afec4958-f90c-324d-8365-1b0c02b836a3.roa (raw, json)
Hash identifier: rTtdOPBms76rNCOQjmlH5guhmpjU6AN9vSif3wH6zjM=
Subject key identifier: 92:D5:9B:C7:00:FB:A3:09:77:36:D2:10:D2:86:65:31:A4:46:6A:35
Certificate issuer: /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Certificate serial: 010D0C9F43285848C150D2F84C63C98125D41000
Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 168.100.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d2:f8:4c:63:c9:81:25:d4:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=ee766ca4-25c7-4823-b4dc-fad45a1d4aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:80:ad:fd:d3:3c:c0:83:10:34:33:f0:ca:
15:f0:11:18:8f:ee:ad:dd:8d:3e:e0:c7:9b:bf:9a:
ad:76:f1:fe:d0:2c:59:1e:a7:81:1e:c6:af:0e:1e:
a3:65:aa:fc:d7:8c:f6:22:03:cd:5d:c2:91:64:9a:
56:9b:b4:33:67:b4:51:dd:d5:45:50:3a:4d:34:74:
3a:5a:08:10:bf:40:c5:eb:00:06:08:68:ca:1f:66:
c3:2f:b7:8f:22:11:04:9c:9a:1d:30:1a:b0:44:1d:
4d:fa:16:4e:78:8b:86:5a:dd:4a:91:29:f9:9a:22:
30:50:6f:db:e7:5f:3f:26:9e:07:bd:bc:81:93:e0:
18:b9:95:10:a5:fe:36:46:bb:a3:3a:38:1d:ca:eb:
95:01:de:6a:ac:5f:48:2c:c2:74:bf:19:a9:07:7e:
f1:7c:41:af:1a:e7:03:bb:cf:8b:97:b5:86:0d:8b:
36:20:ef:10:52:97:85:83:95:83:96:e9:49:ae:7d:
3c:78:dd:e8:be:4d:f7:1c:ee:8d:2d:5e:dd:76:cf:
87:24:7a:f5:31:08:d0:94:40:b9:6b:99:61:7a:82:
21:98:4e:d8:fb:ac:cd:7c:02:d4:83:8a:21:44:9c:
df:20:ae:32:ce:d3:30:ee:ba:21:a6:a1:7e:03:6b:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D5:9B:C7:00:FB:A3:09:77:36:D2:10:D2:86:65:31:A4:46:6A:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl
X509v3 Authority Key Identifier:
keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:40:c7:72:89:54:46:88:d4:61:ec:a4:57:7f:34:34:fc:a1:
47:f5:46:98:0c:6f:b0:7f:ee:09:58:1f:cb:ff:92:01:45:c3:
24:23:44:69:a5:19:4c:a4:4e:3b:5c:c2:cb:71:a5:86:18:e4:
cd:63:b5:85:8c:03:27:3f:3a:42:5c:4f:73:e1:04:86:a8:1a:
40:55:5d:72:58:0a:05:10:93:a4:7f:c7:9e:f6:3b:83:67:a9:
f2:82:2a:40:f6:46:ab:14:92:5b:4a:be:be:94:95:e4:34:c3:
ce:7a:34:a2:6e:95:fa:1d:d9:e1:a6:c9:19:81:e2:27:18:11:
3e:7f:2b:ff:bb:8c:45:0a:f3:de:67:d0:f4:b5:07:a4:0a:31:
8f:f0:82:89:f3:d9:09:fe:b0:89:1e:9d:bc:fb:d7:35:4e:a7:
ff:52:fc:e4:a7:c9:04:9d:80:df:e8:e0:63:34:d5:5e:6b:af:
a5:4c:26:50:e5:2e:ea:13:32:4b:6d:89:14:2c:63:44:73:b5:
7f:b0:e0:32:cd:ae:7c:4d:5c:73:ac:57:0f:cc:1e:d0:f4:e4:
c3:55:72:d9:4e:93:4c:f7:dd:d4:ed:f4:d5:34:a0:b0:8b:38:
35:a9:40:81:48:89:ab:f2:68:f4:c3:05:29:22:48:1d:7a:eb:
25:a9:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:29 2025 by rpki-client