Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa
File: 0b354c56-b1c1-3be3-852d-2a607348a71d.roa (raw, json)
Hash identifier: IMEjBoUbJqH5IBUq/YbxaytsP/yfE4jUo3LB3mVF6v0=
Subject key identifier: E3:7F:A7:AC:11:AD:B6:B1:A2:4A:51:4B:13:BD:C4:2C:DD:8D:A9:E1
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848467ABDE3DE96A2F03986C300
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 3939
IP address blocks: 165.254.1.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bd:e3:de:96:a2:f0:39:86:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=c57ded60-f4cb-432d-bf38-73086c50cc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:96:9b:17:b3:2f:51:de:6a:bc:42:bb:9d:
8c:4e:e8:42:23:ee:15:56:13:19:fd:b0:0d:b7:12:
43:48:64:ce:18:3d:71:85:a0:51:68:1f:65:e1:a2:
ad:e5:f5:88:53:9a:6f:92:41:26:2f:3b:f2:70:7a:
0f:f3:f1:a0:a5:71:ba:9d:42:58:cf:4e:20:40:d0:
be:6d:eb:ab:91:67:dc:58:60:46:9b:be:89:af:ad:
c3:1e:d2:a5:cc:3d:53:2f:95:6d:43:d9:86:a7:93:
82:6c:38:21:9f:ef:47:2b:d8:05:86:30:12:0e:03:
b8:df:cf:07:1e:13:d4:a6:01:c2:c5:70:37:4e:d0:
ca:a0:4e:f3:9b:1c:12:fd:af:78:5e:d5:57:e2:23:
1f:cc:a3:c2:8d:6c:b7:21:40:dd:85:73:0e:90:fa:
07:17:0b:56:74:41:0a:8d:8d:f0:10:d9:62:f0:19:
ce:44:94:65:55:e7:bf:64:d7:12:d6:59:bf:28:be:
cc:3b:c1:0b:43:fe:39:28:95:ec:54:e5:60:3c:88:
e6:b1:c0:8b:82:77:2e:9a:30:3c:54:3c:e4:d0:1c:
70:46:7a:c9:7b:01:40:4e:ff:6c:ea:ac:97:5e:60:
e4:82:36:4b:92:63:d4:8c:0d:eb:e0:90:7d:41:5d:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:A7:AC:11:AD:B6:B1:A2:4A:51:4B:13:BD:C4:2C:DD:8D:A9:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.1.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:34:fb:c0:48:39:34:d8:2d:b1:7f:1f:d3:8b:72:49:e8:d9:
1a:50:91:ab:f9:af:d8:a1:8c:18:7b:23:2e:3f:76:67:6b:71:
40:e7:e7:fc:04:77:1b:b8:3f:84:8e:f1:06:29:ff:40:07:fd:
81:fb:e4:e0:3e:92:31:33:91:0d:a3:bc:de:78:e5:bd:40:f1:
ca:fc:c0:22:a6:b0:32:da:8f:97:8b:10:32:62:16:74:58:91:
c9:62:c1:8d:f7:e8:6f:52:3b:51:33:61:3c:4b:64:83:c0:0b:
5f:7b:54:c3:14:3e:bd:c6:5e:3c:88:e7:4e:4c:19:8f:9e:d8:
c8:f6:e3:2b:55:06:8f:84:41:7b:95:f1:95:64:bf:a7:44:99:
bb:c8:98:f0:06:52:03:5a:42:ad:90:9a:84:87:c6:66:25:1d:
b7:f9:2a:8a:c9:3c:57:e9:17:bb:54:32:48:ba:d5:10:84:b9:
79:ce:b5:c4:98:ee:cf:c1:4a:28:04:9e:85:8d:13:36:7a:5d:
40:99:b7:6f:ff:6d:73:ef:3d:56:52:eb:1f:9b:f8:05:1a:f6:
f2:59:50:9c:e4:a4:58:92:49:a2:db:f1:a1:85:91:4f:d7:01:
e8:76:5e:0f:fc:b6:ce:52:0e:97:1d:ae:d0:cd:89:fb:c8:a8:
cc:54:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:58:42 2025 by rpki-client