Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/18a4173c-5e7c-306c-be47-3528f8b9f328.roa
File: 18a4173c-5e7c-306c-be47-3528f8b9f328.roa (raw, json)
Hash identifier: KII3Lxrgbjfmujqmapvl7qJzWLB1ouDsR3vC6+ZejAk=
Subject key identifier: 9B:7E:00:0E:6C:45:0B:1B:CA:45:1C:C3:0D:2C:00:D2:76:A0:F1:E7
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285847FB1A23A723C8912B07492B80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/18a4173c-5e7c-306c-be47-3528f8b9f328.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 396982
IP address blocks: 165.85.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:23:a7:23:c8:91:2b:07:49:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=b5c67e5d-5dc4-4788-892a-fe6538a6f91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:c2:ea:88:05:26:84:92:d7:94:f3:fc:4b:
92:e2:b9:21:9c:2b:df:af:b7:80:65:ce:62:0f:54:
e0:5e:1f:29:e2:10:93:f2:c9:41:d3:b6:bd:26:ab:
73:e2:aa:8f:90:d2:ea:ea:b5:54:7d:b8:6f:dd:e2:
d8:1e:b1:29:1a:9a:7c:c4:f2:fa:b1:49:1a:b7:db:
79:ce:12:b9:2c:bc:c4:86:57:37:c6:1c:98:68:31:
fd:6d:a4:7e:fe:22:e2:2d:25:5b:5f:65:0c:a9:67:
24:3d:05:85:ef:51:83:02:0c:ab:bf:63:e7:3f:7f:
da:50:e7:32:c8:4d:8f:64:c4:db:a5:b5:de:4c:cc:
d6:11:4d:df:09:b7:5d:bf:75:5c:6a:72:6e:61:a3:
92:84:e3:fa:18:e8:0d:c9:e4:d4:ee:67:b8:ef:db:
61:85:f1:39:19:65:db:b0:ca:2b:d9:24:1a:f9:8c:
89:b2:3e:1e:b8:74:fc:1a:2f:a1:15:8f:d8:89:0e:
35:02:ff:ae:01:31:11:6b:c0:17:7f:6b:04:31:d0:
f0:2e:33:36:e2:bd:14:34:24:7c:83:02:cf:48:dc:
4a:0b:92:8e:5b:a1:04:a4:33:35:56:12:3a:c0:9f:
6f:8f:8d:eb:66:69:95:70:96:17:67:a1:b5:ea:1f:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:00:0E:6C:45:0B:1B:CA:45:1C:C3:0D:2C:00:D2:76:A0:F1:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/18a4173c-5e7c-306c-be47-3528f8b9f328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
165.85.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:20:a6:2a:61:56:42:18:fe:42:c7:0c:c2:da:d7:9c:96:09:
36:d8:fa:63:2a:c4:4d:19:13:58:7b:7e:03:3b:c8:83:cd:09:
4d:45:18:25:1b:04:62:a2:4f:dc:5a:f7:07:6c:1d:88:5f:94:
79:21:67:70:a5:34:d2:28:43:f0:c3:d5:3a:85:ab:45:66:1c:
9b:1b:12:22:2b:af:dc:a6:77:a9:ae:d0:b1:71:48:4e:ad:c4:
cd:29:d0:14:04:99:ce:a1:bd:46:11:a7:ab:c8:88:58:d6:f9:
80:63:b7:56:f1:a6:4b:58:bd:40:bd:d1:9f:e2:d8:e6:24:e7:
10:00:66:e4:be:dd:51:1d:ba:bb:4f:7a:05:37:d0:c8:a0:79:
ac:31:d1:c9:f8:28:2c:86:08:fb:89:16:db:03:32:91:b9:a1:
6a:dc:25:ad:d2:af:fa:8a:57:55:42:df:fa:f1:08:7f:69:82:
9e:0b:ac:72:ad:29:05:43:ba:c3:74:ec:2b:73:9a:98:9f:1d:
b6:44:7e:3a:9a:b7:ee:1e:e5:99:e0:5d:1c:5b:46:c4:70:28:
1b:1c:10:16:7e:c9:e2:2c:11:f5:80:17:d6:cf:58:70:ab:ae:
d3:a3:f5:b8:5d:62:d0:3f:40:6c:97:f0:3f:2f:a0:79:ed:18:
2f:a6:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:08 2025 by rpki-client