Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa
File: cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa (raw, json)
Hash identifier: q5UkhQdRKnMaqHIsvxT+ujrq1T5VfcDftKucddTCNsc=
Subject key identifier: D9:F1:AF:7C:8B:8A:AA:EF:12:B2:02:63:9F:95:E2:18:DB:A2:F2:91
Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial: 010D0C9F43285848037B60AA84ADB922C217BE00
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 87
IP address blocks: 149.165.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:60:aa:84:ad:b9:22:c2:17:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=3e4276ee-494a-4f8f-8ee7-b17b422a5560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:32:e8:7f:1e:0d:3d:c4:07:58:34:d9:af:
9a:6f:8a:09:b5:13:65:43:09:af:33:bc:47:db:89:
7e:da:9e:ca:12:dc:fd:22:cd:c2:b8:43:4b:3e:6a:
3a:b5:de:b2:a6:73:b6:6d:ae:19:09:b4:7d:23:94:
db:88:c1:37:25:1b:38:b6:07:17:31:4b:d8:e0:06:
d0:05:86:93:82:73:63:ce:9b:3f:75:81:47:65:30:
8f:bb:57:15:5b:ff:08:7c:ea:1a:04:43:1b:70:a6:
6a:39:15:8a:77:01:c5:4f:dd:1f:74:b7:0a:ec:a6:
34:f0:ac:35:36:83:3b:15:c4:dd:ba:04:26:3a:85:
6b:cd:60:7e:3a:4a:88:7f:e3:8b:7b:ba:2a:be:d7:
d7:cd:ac:4a:3a:d3:38:20:13:fa:10:e1:07:22:c4:
ba:6b:bf:bf:0c:12:9b:e4:2a:0d:4b:c0:ac:99:9a:
b3:94:0e:64:b4:2c:fd:bc:d9:23:f1:34:7b:37:3d:
88:0c:5f:06:b6:53:1c:21:f9:7c:70:d6:a5:23:58:
10:6a:80:28:c4:d0:be:fe:9e:47:f1:c0:d6:5d:ac:
5e:20:39:30:a7:82:74:51:ee:60:2f:2f:5b:03:51:
b4:0f:60:fe:cd:92:f3:33:20:1f:3c:5b:e6:b3:0a:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:AF:7C:8B:8A:AA:EF:12:B2:02:63:9F:95:E2:18:DB:A2:F2:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
X509v3 Authority Key Identifier:
keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.165.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:d7:ab:97:a0:74:3e:55:f5:81:e5:e4:13:1a:fa:bb:16:98:
91:fa:53:88:ca:d5:38:9e:8f:a8:3c:76:c8:1a:68:ff:a7:ef:
82:88:f9:c6:42:28:e4:b9:67:7e:b9:b5:4c:46:5f:01:87:6d:
ae:d5:9d:57:2c:5a:fc:7f:18:66:e7:93:08:d1:e1:9b:4e:7f:
f9:ac:cf:5a:9e:e8:8e:69:69:25:e0:f8:a5:41:6f:95:60:98:
79:74:24:89:6f:d8:51:75:d7:b5:43:a0:2a:64:0c:9d:01:54:
df:c0:55:e4:2b:10:8c:0b:50:52:84:dc:5f:75:7d:b9:b5:dd:
13:2b:04:6b:7e:43:86:9e:dd:18:70:20:48:ef:ca:7b:83:b3:
dd:e8:72:ff:25:30:81:9c:71:a6:5b:f3:61:00:e6:4a:26:2b:
46:d5:53:cc:ca:34:f3:96:63:e4:35:33:ad:97:6b:dd:0a:70:
c6:96:eb:87:98:0f:cd:23:3f:f2:e4:51:e2:42:55:69:f9:05:
c8:dd:9d:24:3d:c6:ea:6d:92:58:b6:e2:8c:5c:86:0a:f9:5c:
b8:69:bd:5b:44:20:52:47:1a:45:69:e9:2d:ae:0f:15:42:c9:
a0:47:92:ce:26:87:c7:0e:7c:a7:1e:04:79:4a:7c:04:96:d7:
ca:ce:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:36 2025 by rpki-client