Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa
File: c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa (raw, json)
Hash identifier: 2/1kMPCsMuW7OKUW2+UCsQvXe2zxwyS7AG2pJobXL68=
Subject key identifier: 18:FF:BC:52:01:23:54:54:23:2E:6E:EE:92:8A:61:E5:1B:2A:7B:3C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584917DC370C50578D8AA8DB9CE0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 1225
IP address blocks: 165.254.158.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:37:0c:50:57:8d:8a:a8:db:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=f77007b5-1bf6-4531-9f17-17c7f361b5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:d7:8c:cc:21:a9:74:f8:4c:48:86:c4:fa:
c7:b7:23:cd:0e:b4:02:d5:8d:6b:c1:8c:ee:cf:fa:
25:ae:d4:c7:53:e1:03:d9:cd:8c:67:cc:1e:aa:c2:
61:d9:fa:12:d2:23:6d:22:e9:09:90:30:32:74:94:
1a:db:cb:e0:68:23:ba:8f:c1:51:82:1d:9a:73:c2:
04:7b:54:39:c6:f2:d4:9f:be:f1:ce:9e:42:40:d6:
ef:1e:45:69:15:30:60:ef:eb:66:cd:1a:58:9a:19:
48:20:95:c0:bf:e8:5e:62:a6:04:c7:f5:4c:b0:97:
c0:e0:ab:37:70:05:38:45:8f:68:13:54:d7:31:86:
67:0a:8c:2b:6a:e9:85:08:44:22:74:b6:de:30:9c:
a5:d0:f3:5c:e8:5f:c3:8d:a1:5e:21:ad:41:82:53:
dc:81:ee:e2:5b:c4:c2:c3:38:a0:9f:05:1b:01:ec:
cf:99:58:52:70:7b:7f:62:0c:ed:b1:40:24:73:3d:
c8:c0:9f:13:a9:24:94:cf:d6:be:f8:e7:91:41:25:
dc:ed:e9:0d:d1:50:ab:4d:39:15:73:77:70:78:42:
a7:88:c4:97:1f:7f:f0:b6:66:42:c4:0c:2b:6e:fe:
eb:c5:34:11:0e:56:c4:7c:61:37:59:90:9d:52:15:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:BC:52:01:23:54:54:23:2E:6E:EE:92:8A:61:E5:1B:2A:7B:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.158.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:20:a7:98:16:28:e0:2c:05:6c:4f:5a:eb:b8:c0:74:cd:d0:
4e:90:6a:dd:de:35:51:d6:a9:49:28:1a:b0:5a:6c:a7:af:b1:
89:e7:16:62:4b:3c:11:fd:72:e6:85:a1:0a:a4:bd:03:21:42:
7f:06:d6:d2:0f:d6:e9:2b:26:57:37:f1:25:26:39:9b:03:95:
bb:3b:4d:db:17:35:9e:87:40:db:ee:aa:84:26:bf:4d:a9:64:
ff:ef:20:79:dd:04:e1:e6:c4:02:98:06:eb:eb:13:b0:bd:56:
73:ce:37:80:69:b3:7a:c0:7b:83:92:f9:b0:85:c2:ff:ea:8d:
0b:23:9c:a6:58:03:c1:05:b8:a3:7f:89:b1:b5:1c:b4:0a:3d:
00:69:85:f2:79:5b:13:6e:b7:4d:0d:28:d1:77:0a:d1:91:39:
04:cf:85:12:23:17:b7:cc:39:ad:a7:94:46:c6:96:c8:cb:36:
61:1a:1a:52:71:33:fc:0b:b1:8a:1f:de:af:45:c3:c6:2c:13:
71:5c:e9:f6:90:d3:eb:e7:77:07:b9:3c:88:00:08:d2:28:99:
6f:da:44:e6:3a:04:da:13:72:5d:c1:38:bd:3d:76:52:de:d3:
f1:f5:1e:07:42:c2:27:f7:98:a1:eb:45:34:79:f0:5d:ec:f4:
6d:6d:63:bd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX3DcMUFeNiqjbnOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
Zjc3MDA3YjUtMWJmNi00NTMxLTlmMTctMTdjN2YzNjFiNWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklzXjMwhqXT4TEiGxPrHtyPNDrQC1Y1rwYzu
z/olrtTHU+ED2c2MZ8weqsJh2foS0iNtIukJkDAydJQa28vgaCO6j8FRgh2ac8IE
e1Q5xvLUn77xzp5CQNbvHkVpFTBg7+tmzRpYmhlIIJXAv+heYqYEx/VMsJfA4Ks3
cAU4RY9oE1TXMYZnCowraumFCEQidLbeMJyl0PNc6F/DjaFeIa1BglPcge7iW8TC
wzignwUbAezPmVhScHt/YgztsUAkcz3IwJ8TqSSUz9a++OeRQSXc7ekN0VCrTTkV
c3dweEKniMSXH3/wtmZCxAwrbv7rxTQRDlbEfGE3WZCdUhW4zQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBj/vFIBI1RUIy5u7pKKYeUbKns8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzI2Y2Q2YWYtNDg1MC0z
ZGJjLTg4ZTQtZDhmZTc0NDNmMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf6eADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCeIKeYFijgLAVsT1rruMB0zdBOkGrd3jVR1qlJKBqwWmynr7GJ5xZi
SzwR/XLmhaEKpL0DIUJ/BtbSD9bpKyZXN/ElJjmbA5W7O03bFzWeh0Db7qqEJr9N
qWT/7yB53QTh5sQCmAbr6xOwvVZzzjeAabN6wHuDkvmwhcL/6o0LI5ymWAPBBbij
f4mxtRy0Cj0AaYXyeVsTbrdNDSjRdwrRkTkEz4USIxe3zDmtp5RGxpbIyzZhGhpS
cTP8C7GKH96vRcPGLBNxXOn2kNPr53cHuTyIAAjSKJlv2kTmOgTaE3JdwTi9PXZS
3tPx9R4HQsIn95ih60U0efBd7PRtbWO9
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:12 2025 by rpki-client