Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa
File: b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa (raw, json)
Hash identifier: mbr5G4OabezibSoTlY1PHiP698b01CIzyYjmVSte+Zw=
Subject key identifier: 6D:A6:EB:E0:96:21:DC:36:C3:04:D3:8B:1A:60:CA:92:F8:28:54:1B
Certificate issuer: /CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
Certificate serial: 010D0C9F43285848A29B4B5A6891CE2213DCEE80
Authority key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 8070
IP address blocks: 165.159.132.0/22 maxlen: 22
165.159.136.0/22 maxlen: 22
165.159.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:4b:5a:68:91:ce:22:13:dc:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=91ebb958-242c-4b1e-ad11-3902e03455cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:a3:11:bf:81:b9:52:b0:6a:a9:bf:6c:72:
3c:99:19:d8:ef:25:58:b8:89:79:28:72:36:db:40:
91:10:bf:56:94:9a:e8:0d:98:d9:e1:91:cb:67:c1:
7a:30:23:f0:fc:c3:7d:fc:36:50:84:eb:e3:0e:b0:
e3:2c:5a:5d:a4:98:57:4b:5b:7f:5d:dd:8a:94:78:
01:e4:17:1a:56:18:de:e6:6c:8a:89:6a:21:81:cc:
7d:0a:2c:07:e8:50:f0:16:c4:f6:0e:09:5a:a2:0c:
fb:0a:e3:c2:a3:33:44:e2:5e:f6:97:b3:8b:9e:a2:
14:0e:31:ec:76:ba:bb:53:f7:99:46:6b:14:43:a3:
9a:21:64:97:68:7e:11:2a:10:95:43:6f:a4:83:60:
3c:36:a0:43:cb:6a:25:80:81:ad:20:da:98:c0:35:
c5:49:90:68:98:8d:92:d6:22:48:14:a8:fc:c2:15:
d0:76:1b:6e:5f:10:07:9d:6b:6a:e9:18:d4:f0:d2:
3f:c2:f0:03:f6:9c:ff:03:03:4c:42:73:0b:5a:ae:
63:53:7a:93:18:ec:2f:ab:b5:73:6c:06:db:e4:d3:
dd:a4:21:31:d7:56:2d:cb:e9:ed:54:57:cc:49:8e:
c6:de:ec:3f:dc:95:2a:ff:94:65:e1:d6:41:cc:91:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:EB:E0:96:21:DC:36:C3:04:D3:8B:1A:60:CA:92:F8:28:54:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl
X509v3 Authority Key Identifier:
keyid:CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
sbgp-ipAddrBlock: critical
IPv4:
165.159.132.0-165.159.139.255
165.159.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:4e:1f:02:53:9a:51:ae:70:6c:b0:7e:76:9c:d5:5c:05:42:
e7:88:cc:36:25:07:54:9c:06:b2:bf:9d:91:12:4d:97:13:19:
b6:5f:d6:71:0d:9b:10:58:8c:2d:70:7e:fd:68:07:f5:a7:a9:
2c:6b:00:15:7d:05:9c:32:8a:34:37:71:ac:02:d3:37:51:85:
ea:e6:a6:71:a0:4a:e9:30:17:62:de:3b:c1:72:af:1a:26:4c:
78:ad:fc:8d:08:93:12:d1:61:5f:dc:d9:97:32:6c:3b:a0:07:
98:ca:ad:9f:63:36:42:ed:3b:83:48:f7:3e:62:2e:2c:52:07:
a3:fe:e6:33:33:4b:eb:da:63:04:ab:41:ac:51:13:38:9e:81:
b2:97:f2:4e:ad:5e:81:01:4b:be:a5:92:ca:48:19:51:cc:7b:
59:cd:e2:10:d9:4c:88:a8:2f:f6:86:e5:eb:b4:c5:b1:ab:34:
49:21:e5:c6:82:13:fe:2f:4e:82:1a:72:53:93:9c:eb:b8:a1:
63:53:9a:a6:f4:d3:39:4d:1a:a7:e4:46:33:c8:bb:de:ac:be:
c8:08:00:cd:b4:95:28:b3:bc:39:41:74:4c:b6:f8:44:0e:bb:
30:e7:14:e8:8a:f0:eb:36:7f:12:ef:d3:cf:f7:6b:3f:0e:f1:
d2:a2:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:48 2025 by rpki-client