Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa
File: 36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa (raw, json)
Hash identifier: +K2xUMHFcYi/GxknK12k9eAf6JcjR/8u13y8cz5XQ4k=
Subject key identifier: 72:87:1D:F1:7B:5A:E3:0E:C9:D8:CB:17:17:18:BC:01:94:9B:44:14
Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial: 010D0C9F4328584842F6099AE09159DBBCCF44C0
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa
Signing time: Thu 19 Dec 2024 19:45:58 +0000
ROA not before: Thu 19 Dec 2024 19:45:58 +0000
ROA not after: Wed 19 Mar 2025 18:45:58 +0000
asID: 812
IP address blocks: 164.153.165.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:f6:09:9a:e0:91:59:db:bc:cf:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Validity
Not Before: Dec 19 19:45:58 2024 GMT
Not After : Mar 19 18:45:58 2025 GMT
Subject: CN=848cc30e-1bda-4ee3-b751-289a61e62c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:3d:d6:94:b1:d7:68:90:f7:47:63:43:72:
7d:e2:28:d4:14:6d:19:c6:bd:93:75:c3:75:ed:c8:
46:12:11:b3:06:35:25:73:b4:5c:c9:8f:c9:79:bc:
bb:95:b3:6e:55:5f:8c:59:b3:7d:84:26:39:45:5c:
8c:41:f7:48:dd:e3:7a:34:47:82:9b:bc:2a:2d:d4:
87:2a:9c:65:58:22:bf:2c:4a:6f:ca:cf:3c:06:09:
aa:e9:52:2f:f7:47:0d:df:e0:ff:d1:1b:45:2d:3b:
36:46:02:3d:bc:be:c9:67:2f:81:ac:48:64:27:5d:
7a:40:64:66:64:a7:78:0e:8d:ec:89:f6:86:be:aa:
e7:9d:51:9e:b0:3b:42:de:04:86:d0:2e:11:21:1f:
0d:de:e6:81:a1:77:f2:56:2d:51:02:24:59:96:38:
d1:59:9e:e8:44:c6:b6:91:e4:bd:6c:a3:ac:37:b7:
a8:30:be:d4:d1:ae:07:2a:ae:6f:8d:f7:35:62:e2:
05:7e:f8:51:2c:87:99:7b:64:e9:91:02:db:06:e4:
c1:cc:1b:0b:bf:74:0d:37:e8:e7:e2:63:3a:a6:0b:
d9:fa:f2:8b:78:6f:30:25:0c:25:d7:a5:0f:2b:d7:
ba:eb:e9:0c:0a:45:d3:12:2d:2e:0b:3f:e7:66:b3:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:87:1D:F1:7B:5A:E3:0E:C9:D8:CB:17:17:18:BC:01:94:9B:44:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
X509v3 Authority Key Identifier:
keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
sbgp-ipAddrBlock: critical
IPv4:
164.153.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:cd:1a:b2:c3:93:b5:b7:fb:0b:e0:8c:29:40:0b:92:25:7e:
24:25:90:4f:24:c0:59:ee:bf:f4:db:fe:97:cb:37:37:93:33:
1d:f6:18:dd:12:23:ed:4e:e5:7b:bf:b4:33:bd:ab:b8:85:78:
77:8d:87:6d:5d:25:c7:b6:2f:a3:67:ac:b9:ad:96:74:fe:60:
a6:59:53:79:9c:39:03:fd:55:71:ef:96:44:e2:44:a3:20:f8:
10:54:b4:32:8c:7f:49:00:eb:de:44:d4:1c:6d:58:19:d0:08:
17:57:73:65:13:69:e2:63:9d:bd:d6:20:ee:2e:75:a0:93:87:
f2:60:05:79:11:e4:0b:9d:0d:8f:b8:8d:b3:c6:f6:bb:f3:75:
a4:53:00:88:ba:1e:d3:db:38:8b:f7:55:73:fc:8a:b1:28:e4:
ad:0c:9d:83:2e:a1:8a:b4:c1:91:e3:3c:33:02:dc:89:87:c1:
04:ce:aa:a8:e0:e7:ab:83:16:1a:30:44:bc:67:33:bf:aa:53:
48:c8:19:54:43:fd:f1:b4:16:c4:f0:d3:0c:40:be:7f:62:a6:
51:25:90:9b:c6:88:1b:5b:45:c0:6a:47:3b:6d:61:28:91:d4:
65:e0:6b:1e:cc:5b:f9:ab:02:11:af:f6:44:09:cb:8d:eb:d6:
ca:c3:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:20 2025 by rpki-client