Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/42b93bab-5b45-3cb6-943a-f35b4ca137bd.roa
File: 42b93bab-5b45-3cb6-943a-f35b4ca137bd.roa (raw, json)
Hash identifier: umj8udFW/94bDhFPf56TxmbfTakw/CTjEsm6Uwknr6w=
Subject key identifier: D3:70:16:76:31:E4:A8:62:79:FE:5F:ED:C9:D2:D4:D6:D4:9E:A7:4E
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858482A8FE2CDE6A8A46FA310D720
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/42b93bab-5b45-3cb6-943a-f35b4ca137bd.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 394089
IP address blocks: 165.85.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e2:cd:e6:a8:a4:6f:a3:10:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=86dad2c7-2ddf-4508-8e2c-4a74225c20cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:a9:9d:9f:d9:a8:ac:3f:55:a9:27:11:bc:
60:1b:da:28:5e:d1:20:09:4c:d9:a9:c0:ae:fb:78:
06:9b:6b:db:a5:85:6d:03:20:d0:8f:43:9f:e5:ad:
c7:34:90:11:31:0c:cb:97:0b:d3:37:0f:c1:42:bc:
5b:b8:08:0f:ec:b6:6c:dc:b9:e8:f2:1c:d6:10:5e:
49:c1:a7:f7:24:58:63:09:92:b1:0e:a1:80:2c:8c:
83:31:83:97:39:49:bc:47:35:8d:9e:f2:5b:27:d4:
2e:bd:d2:52:e6:96:c9:51:fa:b8:57:45:15:8f:23:
b7:cd:bd:46:aa:2b:bc:47:0f:cc:00:13:66:0d:9a:
ce:8c:41:9b:23:1b:e9:a4:84:b2:70:99:59:8b:05:
01:bd:15:2d:2d:bd:e6:ec:14:25:bf:4d:00:f3:c0:
da:09:e8:23:42:bb:d0:75:82:ba:cc:63:85:94:9a:
7c:b4:80:80:9d:3e:a7:12:71:dc:44:31:ab:fa:ed:
8a:f8:84:ee:ee:8d:14:55:d0:e9:8f:c5:da:18:e1:
f3:a5:90:f6:d8:a8:7a:8b:05:d7:b6:60:40:20:9a:
54:68:4f:51:af:4f:05:a0:41:d3:a0:45:9e:58:60:
48:e5:a6:19:e2:f3:a0:60:a5:f7:ba:0e:c0:c3:57:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:16:76:31:E4:A8:62:79:FE:5F:ED:C9:D2:D4:D6:D4:9E:A7:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/42b93bab-5b45-3cb6-943a-f35b4ca137bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
165.85.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:3f:bb:04:9c:66:7f:d3:a2:2f:00:64:c2:4b:0b:3c:c2:95:
51:41:2f:56:09:01:ce:8b:6c:ff:af:8a:58:b6:b6:e2:12:17:
ab:5f:0e:d3:4d:f2:df:18:60:2f:fa:02:55:1f:10:82:f8:e1:
0d:94:32:9d:86:eb:e9:fa:2d:87:6d:e0:7c:bf:3b:ac:fa:c0:
8c:ca:7e:68:7d:a6:3c:26:1c:45:89:6b:c2:e0:5f:11:0c:56:
c6:2c:25:32:fc:ac:e8:5a:36:80:0f:a4:a4:71:56:9f:a3:42:
60:7c:f7:ad:25:e3:7a:68:ed:58:2b:88:95:bf:54:89:1d:fe:
b6:1f:83:60:fd:2a:e5:64:c1:d8:6d:80:45:47:22:bb:b7:89:
f9:3d:db:b9:91:0f:9d:34:e5:6f:2b:10:fc:3c:82:14:98:db:
91:21:73:24:c2:62:9b:03:ab:84:8d:a8:ec:aa:fc:1f:21:7d:
17:5b:32:b2:e9:c2:3c:7f:93:d3:94:53:dc:e7:1f:a0:18:5f:
93:64:3f:db:40:e2:dd:46:7c:c3:3f:4e:56:03:c6:07:89:14:
07:04:20:82:0c:e3:62:83:38:08:b4:81:01:0b:a6:e6:10:13:
c0:bf:95:a3:ac:21:f7:00:f3:94:af:87:2b:26:02:cd:8f:29:
9b:e3:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:31 2025 by rpki-client