Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
File: 577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa (raw, json)
Hash identifier: OPExi8rvb8eIzRZPGWTls4qfW8vdX8/VGkOZYhW/C1A=
Subject key identifier: 5F:5F:01:10:6F:14:8C:A2:4C:35:5D:1F:28:4A:60:48:E4:D4:D6:2C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858491D7186C7B4C8ACAA81597440
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 22006
IP address blocks: 165.254.238.0/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:86:c7:b4:c8:ac:aa:81:59:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=9888a5d1-2451-49b5-8ffd-e3913c122b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:0f:9c:03:b4:2e:d2:4a:94:0a:3f:1e:30:
ea:df:a1:59:7c:df:87:45:16:ba:4c:18:67:6c:1c:
bd:4e:a8:60:46:03:99:11:41:51:14:e4:52:90:70:
55:0c:6b:ae:08:b9:35:62:59:1e:fe:0f:ef:d8:80:
7c:a6:2b:a4:04:68:d9:fd:16:8d:0d:86:69:55:80:
9d:fa:2a:8c:64:26:64:da:c1:0b:fe:2f:09:65:57:
e5:99:8d:00:f0:ca:d9:9d:85:19:bb:68:16:d3:2a:
fb:66:ba:98:3f:d1:b8:b9:63:d8:05:ba:8c:b7:79:
6d:43:40:44:03:6f:03:fe:ef:14:26:96:c4:db:95:
a7:a3:81:e3:64:cd:d4:16:77:53:14:e9:86:99:22:
ac:c8:50:a2:4a:ff:58:eb:ea:89:25:1f:db:b9:84:
10:40:c4:d2:d0:c1:a1:30:e2:32:e3:40:62:b4:38:
f1:b7:18:7c:07:93:34:65:53:bd:c9:3a:48:43:ed:
0c:d5:14:4a:ce:6c:36:e1:63:b5:41:c4:18:87:b7:
ca:0b:a7:fe:2a:e3:05:3a:a7:47:48:53:73:f7:c5:
51:9b:bb:ea:72:f9:e5:08:68:c8:98:c1:1e:df:ad:
ed:12:d5:77:2e:52:8d:56:8b:35:1e:3e:79:eb:b3:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5F:01:10:6F:14:8C:A2:4C:35:5D:1F:28:4A:60:48:E4:D4:D6:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.238.0/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b7:68:d1:99:94:8c:b1:0a:93:22:1f:12:1e:2d:34:e1:c1:
7e:95:31:4c:a9:a6:be:e1:a1:16:82:69:ba:3b:be:4c:67:07:
28:5e:32:ae:f4:99:1b:21:97:89:4c:b1:50:77:fd:f5:f3:49:
2b:51:0e:80:c2:4d:d1:00:52:72:0f:8d:22:fd:c4:54:f4:91:
43:59:2e:d4:d1:da:29:73:1e:2b:c2:29:8b:ef:6f:eb:da:a0:
1f:9a:c9:dd:c5:88:fe:68:6e:b4:a2:94:4c:be:f8:06:d4:4b:
ef:d1:f4:43:b6:95:f8:0c:65:f2:28:46:aa:4d:40:af:a3:d2:
fb:fe:db:09:70:21:b9:8a:e2:d5:29:a7:d3:d6:ba:66:0a:e6:
8f:77:68:7e:26:22:ce:3a:6b:4a:30:ea:67:b7:24:2f:fc:e2:
b9:0d:91:4b:8a:54:55:c5:7f:6e:17:f0:86:9b:09:14:d6:69:
96:0d:60:00:7a:30:d3:59:52:7c:b2:16:f9:39:7c:c6:e7:ee:
6f:ed:eb:70:e7:ec:f0:de:d4:48:a1:5f:7c:26:84:55:8d:8c:
d5:bd:cc:93:07:86:5c:57:12:62:91:10:c5:5e:92:f0:00:e4:
46:76:10:e4:4f:58:ca:8c:78:b5:2f:12:6e:0e:44:a7:2f:13:
e7:c0:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:15:01 2025 by rpki-client