Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa
File: 66cb728c-d2d4-30fc-9ad1-2039318ab524.roa (raw, json)
Hash identifier: +n8I7sZXDvuSW0d6irS6nUFnD+PBmMOSWeS6Y/C8e9w=
Subject key identifier: F9:CF:23:AF:AD:12:30:D7:89:1C:8D:86:C6:BE:D7:F3:4B:6A:25:A9
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858491D7185C97E5D0B409B419980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 165.254.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:85:c9:7e:5d:0b:40:9b:41:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=f2a3581b-5394-449d-826d-683b95668586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:c4:df:f9:e6:93:77:ee:e2:5e:68:0d:71:
15:9f:ca:3d:71:26:b9:aa:c8:59:02:ed:47:0c:92:
2e:19:0a:42:d7:7f:7f:e5:14:8f:ba:41:db:bd:37:
e7:83:e0:44:b2:52:ce:99:6a:db:3d:53:c4:47:02:
eb:1c:cd:9b:97:b3:21:33:4b:80:ea:e4:58:ff:30:
31:ca:10:f8:c0:a0:30:6a:e4:8c:52:07:f4:6a:15:
bc:0d:84:5f:37:23:ff:5e:33:58:35:b9:dc:08:18:
40:b4:19:bf:ca:13:90:86:a4:dc:9f:61:29:71:eb:
8b:de:83:05:04:f2:7b:33:cb:44:e9:0a:17:eb:c0:
3a:00:6a:4c:69:78:ca:71:be:2f:4f:01:60:d7:4b:
8b:e4:30:7d:33:56:86:b9:38:73:6d:fc:fd:80:3f:
0b:89:72:83:f2:98:25:de:3d:e2:c0:c2:b1:49:01:
a1:3d:8e:8e:8a:85:0a:38:bc:79:41:22:e8:02:9d:
9d:c3:30:3a:98:f8:d0:7c:ca:71:95:77:1f:a9:a5:
72:1f:ff:36:49:65:c0:2e:8e:03:e5:83:cf:88:25:
ed:b5:6d:ee:f5:da:64:a3:1f:0c:6a:97:15:50:0e:
0d:fd:54:51:d3:ec:4b:59:3f:d7:3d:ba:83:78:ea:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:23:AF:AD:12:30:D7:89:1C:8D:86:C6:BE:D7:F3:4B:6A:25:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a7:aa:3f:1f:91:1e:6f:94:4d:c4:6d:c2:61:da:a5:0f:85:
53:fa:6d:2f:3b:31:37:59:a6:ca:3e:6f:ef:cb:93:e2:96:c3:
f9:8b:f0:c1:8a:76:51:42:8e:04:7b:3c:25:a7:a1:38:34:a1:
bb:a5:45:a8:c5:6c:3a:89:5b:1b:9a:bf:9f:d9:07:03:e0:18:
92:49:0d:1d:53:1a:95:3b:ea:84:6e:09:e4:ab:c1:60:c5:cb:
5f:f5:06:b7:cc:b3:40:ef:45:57:75:3f:d8:20:89:05:40:f5:
1d:10:28:fe:45:7b:b3:27:2b:63:8e:24:c2:b3:87:94:2b:d2:
58:ff:1a:42:66:a9:b4:4e:ef:43:bf:dd:69:1d:e0:15:2c:07:
de:59:47:6e:ce:c6:8d:a8:9e:1d:53:26:dc:d3:d6:de:30:d5:
b8:66:28:03:6c:e3:08:c9:fb:a4:01:e3:7a:9d:da:67:70:6b:
13:5f:28:c6:29:07:8a:4a:89:d5:75:8b:b4:29:5b:bc:24:51:
70:68:66:5c:df:b6:b1:91:8f:31:a4:09:6b:87:98:56:58:62:
a9:53:ff:a0:b4:ed:bb:73:97:26:e6:0a:3d:02:21:16:bb:e2:
88:fd:1b:b0:14:bf:4f:90:11:42:11:c9:d2:e8:65:fa:6a:ce:
f6:7d:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:25:13 2025 by rpki-client