Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0447aa53-8511-38a2-a19e-405843606870.roa
File: 0447aa53-8511-38a2-a19e-405843606870.roa (raw, json)
Hash identifier: oYNgbFJd5LUvzpvOz+93ky7BDRQCuaJJKQUGrwOoByA=
Subject key identifier: 32:BB:7C:78:CB:24:A1:73:3F:2A:56:86:21:91:86:92:69:21:8E:41
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285847E35F689B401784D773A30D00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0447aa53-8511-38a2-a19e-405843606870.roa
Signing time: Fri 15 Nov 2024 14:00:39 +0000
ROA not before: Fri 15 Nov 2024 14:00:39 +0000
ROA not after: Thu 13 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 165.85.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e3:5f:68:9b:40:17:84:d7:73:a3:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Nov 15 14:00:39 2024 GMT
Not After : Feb 13 14:00:39 2025 GMT
Subject: CN=b103db06-5f88-42af-a1ca-5e5ddf4ae87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:d7:aa:1f:61:71:9f:4e:ef:32:9f:1b:a2:
cf:9f:c6:d2:70:4a:1e:ef:4a:53:5c:58:8e:31:31:
12:e7:05:ee:a6:16:ce:f5:64:fb:bb:40:bf:63:f6:
2c:fe:a2:1e:6b:4a:cb:5a:6c:bb:a5:d4:63:8c:a7:
01:40:37:1f:cd:70:6b:1a:65:a5:78:8e:19:53:12:
05:65:54:63:f8:a9:c6:14:2a:63:28:43:8c:55:ac:
0e:32:f2:68:a4:54:cf:03:e3:04:73:2d:d9:d7:4a:
15:b4:8d:8a:3a:52:ed:a5:8a:46:23:67:91:62:99:
07:73:80:b5:43:13:40:6e:75:d3:ce:fc:2d:d1:42:
eb:35:0f:fc:aa:75:17:66:85:b7:f2:53:06:65:07:
a6:65:42:8e:f2:94:64:1f:ce:54:99:da:76:0c:33:
1a:3f:73:31:cc:d1:b6:ac:7b:80:79:52:42:1a:8e:
9b:3b:42:f9:ff:d7:f5:50:93:11:f9:3b:3a:d5:8e:
33:37:3f:f2:bb:e3:92:5b:31:69:89:19:97:47:f2:
ba:28:ca:c4:0e:b9:a2:99:4a:79:e8:32:3d:9e:65:
3d:2b:50:31:22:6a:ca:d8:6e:bd:75:01:fb:4b:f1:
54:e5:0f:7d:e2:cc:ae:4f:2a:7a:bd:f2:85:a2:56:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BB:7C:78:CB:24:A1:73:3F:2A:56:86:21:91:86:92:69:21:8E:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0447aa53-8511-38a2-a19e-405843606870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
165.85.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:04:bb:a4:6f:55:b6:f9:c8:de:8f:16:34:ef:79:47:e0:78:
34:97:09:9e:34:a4:ec:8f:4f:33:c6:ca:69:fe:9b:6b:67:a8:
59:48:e6:2b:cc:ac:82:f7:70:0a:3e:62:78:00:8d:5f:fd:27:
36:44:0d:8a:56:e8:b0:56:93:d3:ff:63:00:06:a7:92:86:30:
cb:04:a5:b3:c4:f4:2b:0a:d4:2a:a1:e1:02:a3:60:e6:7c:1f:
d5:ff:68:ca:16:72:9e:ec:37:ff:8d:44:0b:4a:dd:e6:46:80:
a0:8a:73:38:46:1d:0f:e9:c0:2d:84:a4:c7:a7:df:e6:38:21:
98:7c:0d:26:1e:12:52:d0:ad:02:76:f9:5c:4c:18:09:ce:29:
f8:7b:53:8f:d4:64:63:13:4f:a6:f2:09:a8:2d:40:66:f5:41:
f0:32:e9:a9:64:17:fd:d1:4c:cc:09:93:b7:a6:79:3a:eb:37:
c3:64:5c:d1:19:ce:23:30:fa:46:20:03:9d:be:c2:1b:31:0a:
03:85:fd:a0:41:1a:ef:5b:dd:c1:fe:69:02:d6:58:a3:64:fe:
30:02:2f:60:dd:e1:ed:de:cb:e7:0a:aa:ae:05:3c:2d:68:82:
a6:0f:de:84:a7:86:08:33:9d:54:67:01:8c:f9:ec:aa:ea:01:
fe:2f:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:19 2025 by rpki-client