Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa
File: 05ce43ff-ab24-3b50-ae65-c77439766681.roa (raw, json)
Hash identifier: NheMwJ85QwMtmC7YQSDQHUnRnnSeHjFPTv6qe2xU8j0=
Subject key identifier: 11:4E:10:B8:B3:E8:EB:84:AD:27:7C:6E:DD:B4:35:5D:BD:66:60:36
Certificate issuer: /CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c
Certificate serial: 010D0C9F43285848EC96A0E7F279B13D56237B40
Authority key identifier: 54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 32212
IP address blocks: 165.140.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a0:e7:f2:79:b1:3d:56:23:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=833a4030-89f9-4adb-b74a-c36fff50b61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:93:b5:32:9c:d2:4f:d9:a4:5a:91:28:e0:
35:dc:59:b5:d5:74:29:72:b4:9d:f3:bc:83:18:6b:
01:fd:7f:74:11:b7:d7:3b:ea:0d:d3:14:3a:4f:27:
46:f2:e0:bb:9e:f2:0b:03:10:f4:fc:46:e4:37:19:
e4:2b:82:62:f6:bf:f7:32:ea:0e:82:82:4d:41:99:
79:86:9a:2b:45:e3:70:f2:62:16:3e:eb:df:4b:5b:
c5:1e:c5:d0:30:e6:cf:dc:71:e3:94:33:2d:56:70:
95:7a:7f:c9:22:86:90:70:f0:dc:2d:c0:c4:f0:d1:
de:00:eb:38:c4:02:03:f3:3b:c7:b5:8c:d4:98:32:
41:97:6b:82:54:3c:b7:85:dc:f6:0d:e9:4f:19:cb:
51:89:f2:e3:8f:ef:7b:a5:e2:e7:d6:32:3e:25:26:
c7:af:6a:03:89:64:89:96:c1:52:0f:12:a8:7c:a3:
28:ce:8f:63:59:64:fc:25:45:7b:30:b4:1e:cc:00:
1a:e4:0a:24:31:f6:ba:8a:d2:2a:eb:1d:2f:3e:0f:
d0:80:79:09:92:36:5f:b6:d7:bd:b8:73:57:6d:11:
18:3a:38:30:d8:2f:1f:4d:35:8c:e7:b1:53:5e:e3:
e8:8f:cd:d8:07:44:68:73:cc:7e:0f:c5:ab:dd:5a:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:10:B8:B3:E8:EB:84:AD:27:7C:6E:DD:B4:35:5D:BD:66:60:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl
X509v3 Authority Key Identifier:
keyid:54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:4a:64:9c:b0:7b:9f:bd:61:e2:4c:41:cf:24:66:a5:29:d9:
c0:6d:8b:63:78:74:88:1f:c9:10:ce:af:ac:41:ad:51:f2:02:
50:ee:bf:93:40:58:0e:6c:47:83:b5:02:e4:c1:0e:ee:67:06:
90:2a:db:1d:46:c0:38:12:1f:41:75:e5:b7:03:4c:5d:56:2f:
51:e0:cb:1c:53:ab:a7:c7:1f:f8:e0:05:c3:a4:4a:a6:08:9f:
04:87:24:f1:ac:fe:7b:db:a3:14:0e:8d:5c:01:4f:83:8f:3b:
a2:b9:5e:52:21:42:93:be:67:94:57:a2:ef:2d:e0:fb:6e:70:
f0:54:c3:2e:4a:49:16:43:19:0c:af:90:e6:78:98:a2:e0:5e:
80:92:b1:49:4e:54:f7:74:e3:8b:98:38:74:ef:44:25:60:ce:
c9:9e:03:46:82:12:7d:7c:de:d6:ad:e4:71:28:8c:c2:88:28:
3d:63:91:7e:6e:33:20:39:28:31:ad:28:5d:e0:d5:45:a3:16:
cf:a7:29:4c:58:a7:f2:61:9e:54:90:2c:10:73:f7:62:de:ff:
e8:69:b5:ca:5e:44:07:a6:4f:01:e6:6c:4a:87:9a:71:54:51:
78:ff:74:65:b3:8a:dc:cc:b2:b6:be:65:6e:83:19:de:22:4f:
77:88:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:52 2025 by rpki-client