Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11e9fdca-2e63-3bb9-90ff-e7fc7a7cc47a.roa
File: 11e9fdca-2e63-3bb9-90ff-e7fc7a7cc47a.roa (raw, json)
Hash identifier: mEBnNiv+Ed8CnsvkTm3ZfFIjwL+feV4TSL8g8FjkeG4=
Subject key identifier: A7:45:85:05:A2:7C:B2:E3:04:1F:31:1A:46:DA:C0:A2:B9:70:79:F0
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1AB962A9F19628C844C240
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11e9fdca-2e63-3bb9-90ff-e7fc7a7cc47a.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 165.254.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b9:62:a9:f1:96:28:c8:44:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=c857fa62-03ea-44ff-81fe-2285554403a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:72:4a:b0:d8:74:84:af:92:50:91:33:d5:
61:88:ba:c3:7a:9f:06:9c:85:31:f4:32:3d:ff:2d:
d2:0b:7e:7e:2a:44:ac:31:da:e8:34:61:7c:e8:75:
d2:9d:e3:01:e2:d9:be:b6:6a:a3:f0:09:60:aa:55:
09:07:03:b0:c4:ce:ed:d7:48:f9:a3:d4:1b:61:da:
19:de:9d:46:80:46:01:20:96:d8:4a:88:f6:cc:6a:
6d:70:0e:a0:bc:6e:7f:cc:49:97:bf:02:b6:14:ad:
a1:1b:f5:e9:d2:a3:15:43:f2:40:1b:f4:4c:25:4b:
7c:79:bc:23:a6:f9:d4:13:23:c2:fd:c6:b7:c0:e2:
af:8c:e0:35:4f:ce:c3:97:63:ca:a3:78:6b:88:cb:
88:e0:91:76:17:78:91:d0:06:33:78:71:7d:e9:cf:
95:75:d0:da:05:4c:d1:7f:48:73:f1:15:98:e3:36:
6a:eb:43:c5:e3:85:45:2b:3f:60:7c:19:30:24:74:
b2:9f:fc:8c:e5:5f:66:4a:51:3a:68:d7:a8:bd:51:
53:eb:a8:17:0b:60:6e:8c:c7:88:ac:0b:eb:7b:6b:
38:85:a8:d5:73:36:92:db:e4:62:26:50:49:cf:6a:
be:3a:aa:dd:af:e6:6b:4d:a8:ff:08:a6:5f:6a:c1:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:85:05:A2:7C:B2:E3:04:1F:31:1A:46:DA:C0:A2:B9:70:79:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11e9fdca-2e63-3bb9-90ff-e7fc7a7cc47a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:3f:06:e9:44:e5:34:31:0f:ef:56:54:b6:f9:6d:74:21:bf:
c5:bd:a7:77:01:17:79:d8:40:df:aa:6c:5c:04:f9:5a:39:fc:
56:e4:8a:ac:06:bf:c6:16:d9:7b:39:48:6d:24:3e:39:c8:9f:
22:15:76:8b:5d:ce:8a:e3:52:9b:39:7e:c5:6c:46:48:18:31:
44:62:01:25:20:f4:82:a3:d3:06:57:b2:8c:9a:32:de:df:d6:
38:09:77:6c:39:cf:80:26:ed:1d:7e:3c:2c:08:0f:8e:da:f0:
8b:c3:13:93:0c:77:4e:a1:04:61:b1:3e:cb:16:3b:1f:f5:2b:
09:04:04:89:06:2a:39:85:ff:3f:ae:c3:e8:55:2e:46:82:12:
31:33:79:38:f3:95:bd:65:25:c3:a4:f3:ab:54:0c:27:ee:ef:
aa:df:e4:e6:b9:00:99:49:14:7d:b4:5e:57:b1:0b:eb:89:84:
66:be:70:cb:dc:59:ea:1a:1e:3c:ff:b6:5d:0c:8a:c4:a4:45:
c8:3c:7f:cb:41:7f:39:72:bd:40:b0:0e:46:b0:5e:cf:2b:28:
a3:ac:50:d3:b3:ff:21:6b:69:fc:35:22:15:69:0b:39:7d:aa:
5a:2f:f0:05:5d:51:a9:de:41:ff:8d:c6:36:96:c1:56:9a:46:
22:9b:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:35 2025 by rpki-client