Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
File: afec4958-f90c-324d-8365-1b0c02b836a3.roa (raw, json)
Hash identifier: 9/oLxDU6QIZdlGSqH4YUdlaD/76DaEnvOGnJjbCifgM=
Subject key identifier: BF:3B:48:4A:A0:2C:A6:F6:FD:F4:6E:0B:EC:08:06:1F:5F:19:21:32
Certificate issuer: /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Certificate serial: 010D0C9F43285847E1F9F913323D9231780FEE00
Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
Signing time: Fri 15 Nov 2024 02:00:28 +0000
ROA not before: Fri 15 Nov 2024 02:00:28 +0000
ROA not after: Thu 13 Feb 2025 02:00:28 +0000
asID: 14618
IP address blocks: 168.100.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e1:f9:f9:13:32:3d:92:31:78:0f:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Validity
Not Before: Nov 15 02:00:28 2024 GMT
Not After : Feb 13 02:00:28 2025 GMT
Subject: CN=fdd73c2c-d80f-46cd-bc82-b8fe77425217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:9b:f3:b7:73:e4:bc:6a:aa:72:79:ff:98:
b6:ee:e6:0a:3c:e7:d6:8c:d8:46:d5:d9:59:a9:ab:
94:a8:e5:5c:1d:1e:c3:51:1f:03:df:90:77:43:41:
28:67:37:96:8e:be:5e:30:74:ef:fd:85:b6:b7:13:
ba:41:80:a7:71:ab:b1:91:04:bf:eb:43:df:7f:1b:
1b:8b:6b:0a:e2:71:da:ce:e0:08:6a:dc:f1:2f:e0:
cd:8b:c9:7f:5c:98:a0:15:8d:46:40:9d:23:0b:ad:
74:18:2a:72:9a:33:b0:3c:78:f2:19:db:5b:a8:d9:
0e:bd:26:25:11:88:9a:97:31:63:36:aa:4c:85:69:
2a:ff:e3:d2:74:b3:07:f2:86:54:d9:06:ee:08:a8:
79:b3:a1:09:2f:27:ec:4b:db:82:f4:d7:43:b1:ae:
7c:59:37:a2:bb:bb:97:ea:ba:a3:a8:44:74:20:04:
29:70:6f:71:15:7e:cc:32:13:c4:f4:87:c8:87:90:
95:7d:23:07:ff:c9:30:1a:7b:1d:b5:95:34:8c:60:
8e:82:ac:b7:45:34:f0:66:f0:0e:b8:96:d6:c5:82:
1a:38:1d:0b:27:b6:4f:9d:66:7c:12:c5:04:1d:c2:
a1:bf:f3:0f:4a:21:27:c9:38:6d:f4:20:62:3b:5c:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:48:4A:A0:2C:A6:F6:FD:F4:6E:0B:EC:08:06:1F:5F:19:21:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl
X509v3 Authority Key Identifier:
keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:fc:b1:71:38:08:a6:2f:19:77:6c:6e:4b:d1:0a:9c:63:8e:
21:fd:6c:2e:d3:4f:aa:43:34:f0:9e:4d:59:8e:bb:9a:dc:fe:
6e:e1:c6:30:50:2c:7f:2f:0b:18:18:92:14:2d:6f:95:99:17:
bb:ee:81:28:dd:27:d8:b2:fa:c5:5c:e4:18:10:1c:47:da:b6:
8d:01:56:fe:97:25:67:b9:63:72:43:ba:99:ca:b2:a0:28:19:
08:dd:fb:66:46:04:f7:58:7f:a4:09:aa:bf:34:7a:34:3d:00:
42:09:aa:af:38:c8:25:5f:58:52:1f:68:bb:39:a8:cd:18:6a:
15:ec:94:13:1f:ca:09:e0:01:86:da:be:f2:ec:d3:0e:ea:4a:
b8:e9:d4:0b:b6:af:de:42:87:2f:92:53:da:98:ce:bd:f9:d1:
2c:f8:dc:f7:e5:c0:91:b2:cc:65:30:9d:c6:66:23:6e:5c:95:
52:20:23:0c:1f:c6:4b:08:06:69:f3:67:73:c4:0b:54:c2:77:
93:73:ea:61:13:36:4a:a3:be:be:6c:4e:d5:3b:97:ab:1d:94:
0f:b0:d9:4e:72:3f:e3:ca:68:c3:2c:11:a2:1a:1f:6c:ee:5c:
fc:03:1c:ef:57:fb:f0:6f:10:18:56:5e:9b:36:07:d2:12:5c:
9d:1c:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:31 2025 by rpki-client