Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
File: b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa (raw, json)
Hash identifier: p6czjENP+MssWFsQXpbI8R05n/ZRd+FemO5AekH/GgY=
Subject key identifier: FD:66:05:A1:6A:31:80:29:DC:DD:8D:72:81:B4:09:76:F5:5E:11:65
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858481F6533497B6CAEC803100500
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 394089
IP address blocks: 165.85.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:33:49:7b:6c:ae:c8:03:10:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=ed0abcb2-7551-4588-a38b-416e08e92a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:6e:65:32:90:7b:e0:be:d5:7b:35:8d:f4:
ae:7e:81:55:b2:55:ad:a1:65:18:5e:2d:6c:3e:ea:
35:61:8d:3b:dc:7d:c3:a6:59:51:52:f1:66:bb:63:
c5:87:07:42:43:91:90:48:33:ea:fa:a3:58:d0:9d:
10:69:3d:c9:9e:6b:10:e9:43:7f:d8:f8:d5:7e:31:
1b:f8:29:ad:1d:a1:6b:2b:6d:a5:39:5b:6e:14:16:
db:ff:7e:f7:e2:aa:53:2f:eb:41:77:56:fd:da:da:
1d:7d:fb:fc:3a:04:a8:46:90:7c:33:b1:e8:fa:38:
47:b9:4b:67:63:41:5c:c2:4d:ef:65:58:15:ec:73:
a0:ff:7a:bf:d7:b7:c2:bc:23:5b:04:32:90:fa:69:
3f:e5:19:d0:65:c6:41:38:4b:1b:f1:de:53:54:8d:
bc:c8:0c:fe:fe:a4:70:b9:4c:6a:0a:aa:10:69:4c:
c7:75:27:71:32:25:7f:87:ce:e1:84:2a:26:a1:90:
dd:6d:c5:a5:b1:f1:3e:0e:96:3b:c7:32:3f:31:71:
c2:63:7e:2b:85:57:ea:f4:4f:70:61:92:cd:82:49:
78:18:bd:a9:93:43:89:f8:cd:5e:56:1a:a6:c4:55:
df:ce:52:9b:d3:3f:94:ad:14:bd:63:8d:9f:63:ca:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:05:A1:6A:31:80:29:DC:DD:8D:72:81:B4:09:76:F5:5E:11:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
165.85.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:b1:6f:de:c5:0c:c5:4a:7d:44:a2:77:50:3a:c9:dc:ff:ed:
67:e6:f2:08:76:0d:12:ea:c9:c7:9a:aa:04:9e:4d:e2:83:a1:
3c:3c:f0:fe:93:41:92:85:44:ed:8b:c2:01:8f:6c:23:e4:09:
48:ce:d1:7e:3a:db:18:9b:10:0b:f3:1d:f9:a8:34:07:68:c6:
05:b1:44:06:c5:ae:8e:71:db:46:05:9d:08:22:eb:65:02:1d:
90:bc:b2:63:4e:ec:d9:e7:5e:39:d1:de:ac:da:9e:63:45:18:
a7:ec:e0:5f:17:f7:fd:00:d6:39:b2:7b:e9:3c:1a:8e:a1:e9:
35:fc:88:27:ed:e8:06:d9:23:5a:42:0f:5d:73:7d:32:f7:16:
a1:83:b6:82:34:64:b7:85:ef:53:71:2a:d3:9a:d6:6d:4d:d8:
35:be:50:e8:88:da:2d:a2:d7:dd:00:00:9f:27:23:d5:3e:ee:
12:4c:82:0e:ed:1a:7a:93:29:74:40:47:30:56:70:6c:01:c0:
c6:30:7e:22:b5:6f:6a:30:a0:c9:3b:f8:d5:44:3d:1e:28:df:
08:40:5a:f4:44:a1:3a:fd:0b:3d:d7:52:16:31:62:83:19:42:
79:84:d6:85:66:29:20:2e:bb:5c:e4:e4:2a:9d:94:5a:62:e2:
8a:f8:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:02:59 2025 by rpki-client