Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
File: 7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa (raw, json)
Hash identifier: CdbYmFzZ7NaQER5J0ktaQEG+6m5KFAT+VvvJQMHeC4c=
Subject key identifier: BA:2C:70:12:85:69:B6:35:82:52:FF:A2:DA:95:72:C0:01:17:A0:A1
Certificate issuer: /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial: 010D0C9F43285849244E6D358F133610EDE8D500
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 165.109.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:6d:35:8f:13:36:10:ed:e8:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=c6d73db8-c7b5-4832-9434-e927075cd5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:7a:71:d1:3f:e4:e5:93:db:58:9b:ed:3b:
f6:ba:73:f1:74:cd:d0:1a:89:16:fa:6f:a9:64:93:
69:d1:4a:33:ef:6c:3f:88:46:72:f7:04:98:0e:e7:
2d:cb:51:11:dd:c5:c9:8c:23:05:ce:f0:02:78:b9:
7b:ac:6d:85:58:82:ac:cf:e7:f3:e1:8c:82:fe:7c:
4d:40:27:57:7c:01:f0:53:06:28:55:41:24:be:87:
2c:bd:ea:64:e3:b4:20:71:5b:06:c2:d3:25:1b:33:
cb:4e:ed:5f:b2:23:5e:ca:79:94:d2:fd:cb:22:3a:
39:c7:a9:6d:7b:e1:c1:6e:41:af:35:62:54:0e:bf:
92:d1:46:f6:8f:d5:0e:ae:4d:1b:38:2c:59:8a:b8:
8f:b2:fd:86:5b:a7:a4:0f:af:bc:7a:2d:e6:26:87:
a2:8e:56:47:aa:ba:d9:b4:83:44:d1:9e:5d:55:a4:
80:8e:22:74:b3:7f:02:6a:f1:a6:f7:ed:6a:40:8c:
13:00:cc:1d:de:2c:48:30:58:2b:21:d6:79:27:41:
a6:22:1d:5d:69:02:a7:c0:e8:9b:dc:44:4e:26:9c:
d3:dc:b1:23:bf:92:45:d8:4c:d7:0c:8b:1f:3c:c4:
ff:54:51:5c:44:b1:c3:14:4c:be:35:e1:19:b2:5a:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:70:12:85:69:B6:35:82:52:FF:A2:DA:95:72:C0:01:17:A0:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl
X509v3 Authority Key Identifier:
keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
sbgp-ipAddrBlock: critical
IPv4:
165.109.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:92:89:b7:c9:2f:45:85:ea:6a:75:63:29:6e:8f:36:c7:df:
49:cc:63:e6:aa:bb:63:7d:70:e4:e4:3f:0d:a4:5a:1d:1d:28:
63:21:d3:a2:75:d9:63:83:42:b8:e3:8a:74:74:65:db:82:d3:
e6:a9:5f:54:1e:28:5f:c1:3b:f8:5d:7c:42:5a:b4:17:be:a5:
0b:75:4e:27:31:f1:85:7d:cc:a2:5b:de:dd:34:47:f6:f5:af:
ad:09:a0:4f:f2:04:fb:00:fa:02:26:fe:c6:ba:e8:96:7a:4f:
76:d4:ce:5f:07:48:56:14:77:a3:1f:68:dc:ac:c9:93:59:6d:
08:8a:f6:9f:01:90:c7:78:71:38:18:df:0a:a3:13:3d:64:36:
7a:7e:5d:1e:fb:5f:26:48:6a:b4:f8:5f:75:aa:5e:d7:b2:11:
41:50:31:1e:d2:fc:69:96:d0:10:67:52:83:5e:c6:c3:1d:93:
1c:1c:20:44:12:e6:bf:20:af:62:a2:bd:e8:61:6b:ff:b2:a4:
4f:b3:84:8d:f2:0e:3a:b8:f5:50:58:e0:38:80:61:24:84:88:
4d:3c:16:d0:25:a4:bb:11:fa:07:21:ee:6b:ab:fe:be:dd:09:
a6:a6:ec:04:3d:10:4b:3d:c5:66:04:07:3f:89:81:fd:c9:a6:
d3:f1:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:04 2025 by rpki-client