Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa
File: bf541b3f-d38b-3716-affa-7307e218a63b.roa (raw, json)
Hash identifier: Ir2oV1DNb58NAi6qdR7l+052OfGpIxH+O5tHU8UZvdY=
Subject key identifier: A1:21:6D:C9:0F:B8:E6:6F:32:B0:28:0A:88:C1:51:AD:5F:D1:79:5F
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285849568EB3D69DEC78D6AEC9AFC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa
Signing time: Fri 28 Mar 2025 13:00:51 +0000
ROA not before: Fri 28 Mar 2025 13:00:51 +0000
ROA not after: Thu 26 Jun 2025 13:00:51 +0000
asID: 25645
IP address blocks: 165.254.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:56:8e:b3:d6:9d:ec:78:d6:ae:c9:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 28 13:00:51 2025 GMT
Not After : Jun 26 13:00:51 2025 GMT
Subject: CN=b4aa6591-8819-49b7-9e14-88a7f8f349bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:57:40:6d:d7:a0:82:24:b5:c2:01:b2:e3:
78:0d:1e:0b:fc:f0:4d:af:86:70:57:f9:19:0b:16:
c2:be:2a:44:0c:79:06:97:03:75:ae:31:b1:4f:aa:
ce:47:c7:58:f9:5b:15:13:5e:6c:48:33:50:ed:b3:
ec:b2:d8:b6:c8:99:de:c5:f8:fb:52:8b:71:c2:33:
92:9e:00:28:c8:46:f0:ef:86:21:39:de:0c:ec:2c:
a2:43:87:bd:dc:f8:db:86:69:49:20:f1:71:02:3f:
0f:26:a3:b2:c9:a8:d0:f3:5f:eb:5b:48:ad:58:63:
fc:ed:88:f7:f4:67:72:8e:04:8f:c6:76:96:be:d7:
dc:7d:20:ba:db:44:88:8f:ea:c2:4b:93:76:a6:1e:
ac:67:0a:65:e5:33:f8:ac:43:10:9a:72:19:23:2e:
80:42:3d:b4:f2:22:08:7e:fe:98:d7:57:e0:27:a1:
f1:77:c7:9d:9b:3c:27:42:58:25:f6:ba:3c:44:fc:
3b:b0:04:02:58:48:a2:84:a5:b5:60:72:72:95:05:
da:cb:9c:48:46:ef:21:f4:4f:ab:7d:5f:96:68:d9:
05:ee:e2:44:16:07:7d:86:d8:42:09:cd:31:82:a3:
e9:f1:6b:f0:7e:6a:31:36:a9:78:74:16:23:bd:c8:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:6D:C9:0F:B8:E6:6F:32:B0:28:0A:88:C1:51:AD:5F:D1:79:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:a8:78:b6:a7:9f:53:7b:83:e4:f7:e0:f1:f5:14:9f:f7:41:
50:9b:2e:c8:c8:e7:72:8b:44:a8:15:93:ea:4e:22:aa:c3:b3:
02:ea:6b:25:6e:b2:47:db:61:e4:89:a8:d3:2e:80:13:75:8a:
32:6d:71:00:58:48:df:c8:f5:75:63:26:d6:25:73:6e:31:97:
78:33:7d:33:33:4e:9d:cb:99:ae:25:f2:35:4d:91:93:c7:22:
2f:ae:d5:38:90:08:bc:04:6d:78:62:65:f2:22:53:d1:9e:1f:
c2:5d:68:1c:d2:19:ea:99:ba:12:8f:b4:27:48:b6:a0:20:e8:
63:12:49:c6:b9:46:2f:3d:91:f4:f3:74:ae:9f:e6:95:35:85:
c4:6d:ef:d5:05:4c:58:a7:d8:71:a6:d2:83:d4:75:a3:e3:a9:
92:b2:c7:08:53:40:46:fb:6a:72:8d:db:a2:2a:15:10:e7:7a:
d0:c7:75:5f:8a:14:1d:3d:6a:28:9b:af:e1:da:6c:e1:78:be:
6f:ac:d3:7f:73:90:44:9b:c3:4e:74:58:06:4c:6c:c9:39:c8:
99:c6:e4:21:b4:ae:86:bf:74:1f:a4:4e:63:6a:58:f4:ff:52:
52:7c:54:3f:d5:b8:a4:6d:24:74:fc:56:1c:86:ec:8d:5b:4c:
2c:00:b0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:28:00 2025 by rpki-client