Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa
File: 2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa (raw, json)
Hash identifier: +mm+ULIjOt8IulOT7N8FjyATCV/QgZ3iHF0LRfrC3CI=
Subject key identifier: FF:9B:0E:FC:35:8A:1D:96:AD:E3:5F:DE:1F:68:38:22:04:CF:8A:84
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1AB951DE9D906A39311080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 165.254.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b9:51:de:9d:90:6a:39:31:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=39c74f74-029a-49fd-8482-b98a1ca1fbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:af:79:d2:33:e2:41:1e:5b:0a:e5:96:60:
71:e7:31:54:9f:2b:df:a3:f1:3d:41:06:f5:69:ea:
f5:23:0a:be:9f:86:49:98:91:71:61:50:76:3a:d3:
98:30:ce:83:e6:62:60:60:39:12:f1:33:c2:5e:64:
3b:e3:0e:12:74:df:59:2b:55:13:48:d6:07:a1:af:
e9:af:71:79:1d:d9:87:73:73:32:d9:63:9a:24:63:
d8:7f:fc:a9:58:5b:34:f8:58:74:d7:62:ba:fd:95:
fa:e5:52:7a:b6:6e:09:a6:60:7a:d0:46:d7:12:59:
0d:59:66:0c:1b:f9:22:d7:e1:21:a9:91:d1:b8:56:
dc:6e:c3:d2:58:43:97:58:3b:cb:75:e8:19:d3:73:
88:08:e4:46:48:fe:c5:ba:06:5a:0f:46:13:d6:9f:
7e:7f:10:10:9a:3c:0a:90:a8:9d:95:f9:0c:d0:da:
8c:f8:fd:eb:4e:b2:fd:11:2a:2c:71:5b:59:a3:ac:
cd:08:d7:89:a4:65:e1:8a:27:70:52:3a:84:01:4c:
9c:f8:94:27:bc:1f:d7:3e:9d:e1:7e:3b:09:a2:71:
a2:5a:b1:4f:4d:fb:81:a0:a8:b0:ae:e6:c9:64:5a:
87:3e:4e:69:ff:21:ba:31:18:bd:9c:8c:ff:36:3d:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:0E:FC:35:8A:1D:96:AD:E3:5F:DE:1F:68:38:22:04:CF:8A:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:25:b7:24:c5:2e:53:a0:fc:c5:9e:ac:de:9c:cf:7d:72:17:
92:4d:86:00:89:8d:d1:88:47:67:3b:4d:2b:48:90:28:ae:58:
1b:ae:10:5a:a7:2a:6f:9c:c8:6f:c1:fc:34:cb:7e:bf:18:15:
a9:84:11:cd:e8:f8:35:85:de:79:84:5d:05:6a:cb:58:e5:c8:
7d:ed:39:69:2d:e4:5c:e1:3d:c4:7c:c1:92:1f:79:fb:3a:b9:
30:68:a4:a1:b1:a2:ac:ab:80:6c:8e:13:21:fe:13:f5:07:86:
4c:92:b6:a3:bb:1e:e2:d0:a5:6a:72:ec:27:c5:1d:14:36:11:
f3:62:c4:7b:5c:63:cf:a8:59:de:2a:d3:9e:b1:22:7b:54:70:
b3:00:15:4c:25:8d:3c:0f:bc:8f:1f:be:e4:cc:76:a6:07:aa:
5c:6e:5f:ad:36:d1:75:7c:06:92:18:90:96:29:88:4f:c5:d6:
c1:ae:ce:70:86:d5:05:91:87:fe:fb:22:a9:89:21:40:86:0c:
a6:30:e5:76:a0:d6:74:06:bc:5a:61:b2:54:29:1e:6a:25:23:
b8:b9:01:18:20:18:e6:0b:39:74:42:29:9a:8e:7f:84:16:81:
dd:51:a2:cd:7f:4b:46:11:17:0a:e9:26:9f:46:7d:7c:97:c3:
a1:7e:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:12 2025 by rpki-client