Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5723662e-f8d4-3ab5-85e9-66dce12c87d7.roa
File: 5723662e-f8d4-3ab5-85e9-66dce12c87d7.roa (raw, json)
Hash identifier: 8+n9InMNzbn+8UtpF2aFu0qRdmWFBqv+l5Z9fpEyH1o=
Subject key identifier: FB:0B:0D:6C:C7:B6:8D:FD:DF:E8:BF:D2:2E:0C:F1:D3:BE:35:6E:34
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F432858480EA51A72559926F8BED06280
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5723662e-f8d4-3ab5-85e9-66dce12c87d7.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 165.225.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1a:72:55:99:26:f8:be:d0:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=34ed494e-4188-4812-ab10-53634e27eacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:5f:8b:bb:e3:3b:b4:2d:ce:2f:23:f7:4c:
dd:3c:4d:04:56:90:78:63:11:c0:a0:08:31:07:23:
13:14:ab:fd:a7:64:90:64:73:ac:61:da:9d:3c:7e:
84:95:11:5c:e3:ef:ed:68:c2:32:76:75:60:d7:b9:
d4:6e:f3:fe:f4:b9:ed:93:af:f3:63:68:2f:87:41:
e5:4b:62:95:ab:ea:50:79:cb:00:09:8d:f3:3c:25:
9a:a8:cf:04:f9:fc:e7:f8:2d:c2:43:5b:ac:f0:d2:
bd:f4:54:d8:a1:02:12:ee:a3:d4:27:87:2a:c9:73:
ce:6a:da:07:eb:cd:74:57:c1:96:37:08:4b:12:fb:
d7:74:42:77:8f:8d:ed:4b:0e:06:ac:ef:93:d7:1f:
0b:84:a0:da:9c:a4:dd:76:6f:ff:97:7f:37:df:d3:
76:7c:71:39:cb:1b:eb:f4:91:d9:cf:2b:60:51:34:
01:7c:73:8d:48:a4:57:19:cb:f0:32:73:dd:1c:23:
0a:0f:bd:ed:09:f3:f1:fa:fa:83:22:25:1a:8f:ea:
ec:bd:4b:8c:d0:5f:67:38:3d:cd:9c:78:4a:ed:3a:
81:e9:0f:43:22:29:3c:64:f1:e1:86:ba:67:3d:c9:
38:bf:e5:69:06:c4:33:c4:35:de:ac:42:9a:91:a5:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:0D:6C:C7:B6:8D:FD:DF:E8:BF:D2:2E:0C:F1:D3:BE:35:6E:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5723662e-f8d4-3ab5-85e9-66dce12c87d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
165.225.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:1f:c7:15:c9:b6:67:66:90:24:5e:e3:c6:af:ca:79:39:62:
2d:2f:da:7e:0d:4d:75:24:8b:f1:5f:fe:00:c1:2c:43:b6:ea:
df:f3:8b:5b:75:94:2f:0a:c9:05:23:ef:be:d6:9a:c2:67:30:
f8:5a:1a:d3:a3:e0:5e:be:23:ae:d9:68:d8:c2:88:4e:92:76:
27:57:7d:fd:5c:5d:ba:85:e0:3a:42:d7:5e:56:f5:27:f7:cb:
11:cc:7b:00:64:3f:7e:02:b4:1e:84:2d:2d:2f:ec:42:1f:1e:
fa:4d:a4:91:63:e0:27:bc:61:16:c2:d3:77:d5:1f:0c:2b:2e:
51:e6:cc:1f:c8:e1:b8:70:bb:05:45:25:aa:8c:f1:74:63:b5:
5b:82:0f:48:2e:10:42:98:c7:e8:01:e8:e4:7d:f3:d0:69:c4:
a5:88:f0:70:4c:92:f4:f0:09:17:5d:c1:d3:27:72:3e:35:5a:
8f:66:b7:8f:6d:9c:b0:6b:0b:1a:16:d2:61:a1:35:4e:87:fd:
31:51:63:c7:7e:31:82:b1:f3:39:fe:21:c1:fd:27:f6:9d:4b:
2c:4a:f2:7e:7c:d2:39:28:fd:05:d7:d8:8f:50:2d:41:f7:6a:
d5:cb:d0:54:e3:4d:28:e2:62:71:78:94:dc:71:26:07:a4:3b:
6f:34:1f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:31 2025 by rpki-client