Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa
File: 0eddf336-ce40-3272-ba3f-78607f29de84.roa (raw, json)
Hash identifier: KL35CEMpT9/SiyaXB4nFJ7BOUfC3OHK+8LaBSVU152U=
Subject key identifier: 1A:2C:DE:82:CA:54:4B:23:57:4A:01:0B:C4:E5:F7:EE:D6:EF:2A:47
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584839EAC8E1285A14275368FF00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 20940
IP address blocks: 165.254.23.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c8:e1:28:5a:14:27:53:68:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=5dcb3def-18e8-4a2d-917a-fb8885d5c448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:f2:15:74:d5:a8:80:cf:af:96:92:85:7b:
72:2d:a9:3f:ee:af:3d:6a:8b:54:fa:a4:ce:60:99:
39:d4:05:ea:f9:43:0e:e1:3f:29:b1:95:ba:11:8c:
d1:ca:89:02:06:7e:a5:e3:3d:1b:49:39:93:67:01:
8e:90:15:48:7c:4f:56:cd:3b:69:fd:08:4b:3c:37:
ec:86:a1:a7:a4:39:0c:c6:2b:fe:a1:32:d1:b8:dc:
ff:61:69:21:58:d3:b4:91:cf:9c:90:55:49:59:79:
5d:f6:c4:f6:1c:62:42:9f:75:16:4c:e3:28:be:7b:
f3:47:75:73:82:00:93:03:5b:01:f3:17:5a:6e:0d:
50:88:d8:2a:19:c0:d0:e6:79:6b:9b:83:e8:44:85:
05:24:16:70:d5:59:40:8f:7e:dc:13:d5:a4:33:8b:
c7:c1:b8:81:33:83:50:dc:df:94:bc:b0:63:b7:b6:
a2:6c:59:83:b1:68:35:fe:3e:75:3b:b3:2c:0a:08:
f2:05:28:4c:db:c2:ba:40:ae:f1:e5:31:4d:72:62:
19:10:aa:ce:8e:1a:2a:13:11:58:2f:bf:d1:54:a4:
c5:3f:15:ba:97:34:bd:99:e2:4b:8c:9a:53:89:42:
58:e3:bb:14:be:96:2c:1e:e3:cf:ad:7d:5c:39:a7:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:DE:82:CA:54:4B:23:57:4A:01:0B:C4:E5:F7:EE:D6:EF:2A:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.23.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b3:1a:85:af:cd:e4:12:50:c2:99:7d:7c:24:de:bf:b0:52:
28:02:d0:90:01:9a:b5:35:7e:f3:56:8f:5b:03:bd:83:64:dd:
23:76:27:a7:2c:2c:3d:23:a7:05:c9:04:03:e9:4f:ad:c5:fe:
51:97:5c:06:c4:31:fb:e5:82:98:56:07:6f:d6:06:c1:aa:51:
c8:35:f3:1f:7c:db:1e:2b:c3:b8:cc:63:2c:ef:c6:12:73:68:
cf:85:75:84:70:70:9c:fb:db:d6:00:24:f0:20:96:a5:07:7f:
f6:0c:e9:36:92:66:85:cf:5e:1a:27:36:54:ed:44:8d:6c:0e:
cb:d2:e1:48:c1:b0:cf:22:a7:f0:73:05:f3:3d:2b:ec:87:56:
29:89:5f:65:6f:93:c0:ac:e5:a6:60:e0:11:e5:36:74:ed:69:
d7:9d:7a:db:e6:76:82:2e:5a:db:26:6c:a8:f0:d9:68:14:db:
37:66:1a:d8:65:05:5e:a6:65:45:9a:31:3c:4b:32:35:26:3d:
df:9f:a0:31:b4:a4:1a:bc:9c:63:2d:e0:3b:a2:cf:cb:9f:a6:
d9:4d:a5:57:40:49:eb:a6:1a:80:be:2b:64:df:43:7c:ad:f5:
0a:6e:c5:73:3e:62:f3:03:cd:a4:7a:a5:ba:4f:1a:f8:0e:3b:
33:46:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:06:14 2025 by rpki-client