Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e62eb08-541b-3dc5-8f00-8508b3cae4c9.roa
File: 4e62eb08-541b-3dc5-8f00-8508b3cae4c9.roa (raw, json)
Hash identifier: DjOllycJfSvj43tYxb++AkJC7DGbBIq0Ybjod2iJSMk=
Subject key identifier: 4B:92:FC:F8:D6:94:9F:88:A4:10:B5:90:68:AD:C9:98:2D:6C:57:A1
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858491D71867F1B084E544D6BEA00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e62eb08-541b-3dc5-8f00-8508b3cae4c9.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 393259
IP address blocks: 165.254.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:86:7f:1b:08:4e:54:4d:6b:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=1e37d17f-0acb-410b-89e9-08a2ede28237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:10:ca:c6:67:a3:aa:c0:3a:0a:a7:6d:5b:
91:b1:05:67:f1:37:ae:1a:d9:16:db:df:2b:71:d6:
5d:a1:8a:b9:e9:51:29:8d:d8:24:be:8b:bf:c3:09:
c1:a2:78:2d:85:27:b6:3f:e0:22:ad:a0:b0:c0:39:
b8:60:cf:eb:ae:c9:db:5f:a3:60:af:2c:42:87:6c:
a1:ef:76:2a:34:d5:88:6f:d4:69:d5:35:19:b0:db:
75:bd:cd:92:da:28:1a:19:2e:58:ec:e9:a3:d2:43:
9d:7e:4b:16:01:bf:04:ec:7a:21:12:e7:16:af:1c:
5b:95:4e:d7:ec:2a:c2:86:d0:04:55:5e:4d:be:a5:
45:92:83:26:b6:87:ca:4f:bc:a0:f8:91:9c:bc:e2:
ba:06:ae:a1:41:c8:8d:0a:93:50:59:34:3c:44:bc:
3b:15:b3:1a:74:76:bf:75:3b:b4:93:ad:1a:d5:10:
e5:40:cd:8f:f1:10:35:d3:78:57:f6:00:9e:5c:f6:
d6:45:3d:56:8f:c6:6b:26:21:68:d2:db:da:82:a1:
a0:76:d2:06:ca:89:b7:41:7f:9a:0e:c9:c8:00:7a:
d3:26:8f:7b:74:13:a4:ee:32:db:d5:a2:39:eb:d3:
09:83:de:d5:59:66:09:15:db:ea:52:02:ce:0e:19:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:92:FC:F8:D6:94:9F:88:A4:10:B5:90:68:AD:C9:98:2D:6C:57:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e62eb08-541b-3dc5-8f00-8508b3cae4c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:37:2b:31:43:d0:9c:b1:c5:5a:de:d4:eb:bd:45:fc:ab:f0:
a9:2d:c9:fc:a6:25:6c:5c:88:f6:fb:7c:93:76:0d:36:ae:06:
90:7f:db:93:f7:22:11:87:a3:14:be:d3:a3:b3:7f:dc:84:56:
8b:7a:d1:5b:0d:51:e1:96:96:ec:8d:c7:48:54:0b:58:df:b2:
62:de:b1:ec:93:8e:81:e5:e2:1c:6f:83:90:2c:13:bb:a0:c9:
26:98:0c:ac:ff:d2:1a:72:61:d8:b6:75:ba:4a:9c:a8:7b:3b:
6c:36:f7:8a:c1:26:19:d1:e7:a0:cf:f1:45:ec:95:fd:4c:7a:
ee:29:08:91:31:54:8d:2c:47:43:e6:7e:9e:3f:3c:f3:ad:1c:
01:dc:29:85:29:07:b6:35:11:b0:d6:81:af:fc:cf:6a:ee:3c:
e0:36:23:31:bb:75:0a:75:cb:81:f8:aa:98:ee:a0:ea:6b:8c:
30:ce:83:96:21:56:60:2f:63:91:0d:ba:35:31:dd:84:7b:2b:
d3:ae:78:3c:e1:0a:3d:3e:01:8b:ea:31:00:38:5c:10:9c:56:
9b:2b:63:96:b2:0e:bb:0b:d4:c9:9f:4d:d4:0f:a5:50:59:0a:
df:ef:f8:aa:4e:3e:75:24:51:c3:66:27:70:96:dc:16:62:40:
ad:5e:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:25:15 2025 by rpki-client