Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/471dbe4d-6c15-3f55-9b66-07bac9477f41.roa
File: 471dbe4d-6c15-3f55-9b66-07bac9477f41.roa (raw, json)
Hash identifier: NdQelB4lyM/0bv1dxCX7rRTxN1jT98bEC4lHqsXohh4=
Subject key identifier: 55:F1:CD:D9:C2:DC:70:21:E5:AB:2B:42:DD:D3:F4:EB:86:F6:80:E2
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285847FF4A3EF0B6D2A2A46CC34800
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/471dbe4d-6c15-3f55-9b66-07bac9477f41.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 165.85.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:3e:f0:b6:d2:a2:a4:6c:c3:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=6f2361b7-c3a8-4f23-97d2-55db74f6670b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:72:5a:86:f7:8e:23:3f:11:35:81:3d:c5:
4e:63:3c:6e:70:6f:30:03:2d:26:c5:49:d5:5a:21:
51:01:af:ca:7a:86:b6:27:77:e2:f9:0e:d1:3c:60:
ab:a8:14:c9:91:a4:7c:60:5a:b4:e0:65:83:18:32:
27:3c:e3:51:b0:53:30:de:6d:f4:12:53:1f:58:6a:
63:ba:64:f6:e3:9c:d1:4b:59:d8:71:36:6c:cd:94:
69:12:6b:59:c9:92:16:b5:71:77:30:67:d0:09:ee:
03:8e:6c:3f:6a:90:b7:13:1c:9a:f5:96:8e:29:69:
14:81:ef:7c:c4:8f:60:3b:94:70:a7:c8:03:1c:9e:
6b:7d:38:d5:c8:0f:20:bf:f4:b2:4d:63:23:16:51:
43:2d:44:41:29:dd:91:8c:73:7e:cb:7c:18:72:31:
c1:f5:b2:aa:0d:db:44:b7:10:86:9b:52:7b:09:8a:
74:09:21:30:66:60:80:e9:49:0e:26:4d:0b:da:4c:
2a:94:ad:2d:0a:80:b7:68:a4:5a:b7:99:64:46:56:
93:49:28:da:69:72:7b:14:e5:6a:16:62:89:ad:cc:
cd:08:89:e0:11:fe:c5:78:5e:68:b3:b1:0d:e4:33:
69:e9:1f:b4:da:25:8c:25:98:75:03:bc:df:43:a5:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:CD:D9:C2:DC:70:21:E5:AB:2B:42:DD:D3:F4:EB:86:F6:80:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/471dbe4d-6c15-3f55-9b66-07bac9477f41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
165.85.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:6e:57:3b:04:a1:6e:ca:92:40:1e:eb:09:2d:79:56:43:ec:
a4:82:8e:44:77:61:4b:43:39:89:44:50:d5:01:63:01:b6:df:
f7:8d:e3:3b:0e:53:c7:a7:6a:7e:55:6a:a3:89:05:e7:06:d1:
e5:30:80:a3:af:fc:2c:32:8d:f6:4b:cd:2c:90:ad:fa:cc:24:
b6:c9:27:c2:d0:59:79:8d:68:d5:15:eb:41:5d:52:9d:7f:12:
5f:6e:81:c5:d5:25:64:b4:d6:eb:71:5c:3e:2b:84:99:fa:b0:
91:ac:b7:ce:59:9d:7d:43:16:e9:93:ef:c8:9a:40:94:70:8b:
a6:9f:d7:a3:2b:0b:5b:d9:17:f1:e9:ee:7d:1c:e7:e0:bb:4a:
34:20:59:ab:b6:44:cd:ed:b7:f7:97:80:ec:fb:27:f4:51:15:
6a:fd:2a:73:1f:3f:52:85:0a:2a:fc:6b:5f:c8:23:d4:f0:9e:
02:62:28:44:ba:c6:63:5b:30:c2:d1:b2:bf:09:c5:d1:40:ea:
64:89:6a:b9:c5:60:72:03:8c:44:79:48:b9:66:9d:74:01:4f:
29:74:bc:6a:36:34:ea:63:fe:04:b9:fd:0c:7d:e4:1f:34:ba:
cd:1d:3a:d3:ac:55:e7:15:89:7f:d0:e1:b4:9b:56:5c:41:ac:
ba:cb:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:11 2025 by rpki-client