Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa
File: 4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa (raw, json)
Hash identifier: FQu606y3tcqx7glkDbY1CA2Zk7WmIxoSTfoVaE8wy90=
Subject key identifier: DA:54:63:80:5E:F5:6E:01:8B:E9:9C:B5:CD:74:A9:97:B2:35:BC:6C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285849244E84CFDB52D4068BF15500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 399469
IP address blocks: 165.254.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:84:cf:db:52:d4:06:8b:f1:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=904c2d47-bf2c-4a7b-aa7d-cb93aecae2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:6b:83:a0:74:a9:3a:71:1c:97:1f:4b:b8:
af:89:e4:e1:f2:0b:b0:1e:d1:1b:45:9a:37:51:47:
0e:3f:5c:9c:9e:4a:68:09:4e:36:16:36:c9:91:34:
e3:30:11:2c:97:4f:02:a9:a3:2f:96:97:8c:44:79:
00:16:71:20:9e:9d:63:1a:a1:7f:6b:aa:2f:a2:31:
58:f6:4e:17:6e:c8:df:0d:b3:31:c4:bd:1c:f6:d8:
09:4c:d2:c2:46:40:b7:56:5b:58:e8:36:b6:43:dd:
b9:7f:cc:35:28:ed:aa:1c:62:e2:eb:81:29:a0:91:
63:f3:c3:35:d3:f5:b2:1c:6b:6c:e6:92:95:aa:3b:
d0:96:9a:f4:b7:81:90:e6:0c:36:1c:45:23:5f:71:
ff:d3:6a:d5:07:e6:9d:e0:b1:3a:f5:41:b0:3d:b8:
e8:c0:94:c3:e6:fc:5b:e7:48:9f:9f:70:62:c1:8f:
b7:89:d2:70:df:6b:db:a5:af:8b:96:07:2e:3a:bb:
05:b9:74:da:75:f0:d8:f8:4f:09:83:8c:f7:47:c4:
eb:06:c4:1c:3e:d5:7f:7f:dd:d5:a1:d9:e0:01:e5:
76:ad:7d:c0:16:01:2a:af:b4:44:f3:ed:6e:5d:01:
ce:42:15:5c:a9:a9:cb:bc:76:19:be:12:bb:47:17:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:63:80:5E:F5:6E:01:8B:E9:9C:B5:CD:74:A9:97:B2:35:BC:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:75:22:f4:76:83:c6:cb:06:06:d5:a7:ae:d9:90:b9:c3:f1:
e6:b6:70:1c:e4:df:8a:24:49:4d:12:db:d5:9b:e1:55:63:c8:
37:cb:c1:75:61:b3:2e:cc:8c:4b:89:e2:0f:ac:52:f6:dd:01:
bc:3f:58:a7:80:65:f0:6f:d0:63:6e:05:a3:72:82:e1:80:92:
81:4e:55:6d:08:25:91:fa:d7:11:00:84:a0:a1:a4:d7:f4:59:
e9:59:6a:e1:a4:4e:29:12:cc:d0:31:85:12:8e:29:a3:a7:b8:
a0:3c:de:2e:4d:33:70:0c:d4:18:1a:b7:42:81:6a:2c:39:05:
b3:94:c9:d8:35:4a:d5:4e:f1:08:ab:c0:f0:30:f1:c1:a1:75:
70:cb:27:50:9d:e4:ab:0a:b1:34:d0:1f:2d:ff:10:5e:63:4c:
86:50:9d:df:ae:f3:00:56:1e:f8:2d:8a:56:5b:79:9d:66:2f:
1c:9c:6c:ac:7c:fd:d0:4f:8f:15:c3:45:db:6f:b6:a9:e6:a4:
ac:07:3d:0c:4a:50:ff:58:32:68:f8:21:66:7a:cb:99:13:66:
ec:14:33:33:75:f5:5f:52:a6:2b:8b:28:6d:25:58:c5:48:64:
27:e1:8f:6b:d3:33:e8:fb:10:50:5d:6b:f2:b6:97:6c:dc:ba:
0f:71:8d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:30:35 2025 by rpki-client