Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa
File: bf541b3f-d38b-3716-affa-7307e218a63b.roa (raw, json)
Hash identifier: Lq/j71QVXMJNjR6Q+fK6l5iXc3XI98+SkKThNcWkcyw=
Subject key identifier: 9B:59:E2:0C:D0:55:6B:A7:B2:13:53:56:00:9C:5B:53:87:41:DF:67
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584876D86380556C6330FE6DB518
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa
Signing time: Tue 07 Jan 2025 09:48:16 +0000
ROA not before: Tue 07 Jan 2025 09:48:16 +0000
ROA not after: Mon 07 Apr 2025 08:48:16 +0000
asID: 25645
IP address blocks: 165.254.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:76:d8:63:80:55:6c:63:30:fe:6d:b5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 7 09:48:16 2025 GMT
Not After : Apr 7 08:48:16 2025 GMT
Subject: CN=20befbb9-4d56-4622-b0f6-a263ec22f4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:ec:c5:f7:ed:88:bb:42:28:f1:06:9c:83:
2e:fd:cf:d5:5d:99:43:ea:db:08:33:31:ae:86:62:
cc:4f:0e:08:6e:1c:9c:6f:38:ba:f1:e8:09:6c:93:
c3:a8:16:18:99:c2:a2:61:16:6b:b7:c9:ec:a3:28:
cf:01:a8:c2:3d:c8:b5:c9:45:0d:07:63:90:4a:d5:
83:59:b3:50:3a:83:cd:ac:26:b1:6e:a6:09:df:9b:
b3:03:28:2d:92:5e:be:3f:96:ad:72:52:a8:79:e5:
2a:19:6f:ae:7e:d5:61:f7:22:2b:89:84:12:a5:14:
96:15:98:27:28:14:40:f4:be:1c:4d:ae:0a:e6:d1:
92:b8:60:19:48:03:9e:57:28:ad:ce:32:64:49:3a:
4b:4b:80:39:6a:6e:5e:81:cb:e8:df:58:77:56:41:
8d:62:a8:bc:51:0b:be:9e:a3:fd:8a:1e:49:af:48:
51:63:32:fb:f7:24:af:bf:7a:5a:bb:7b:b3:c6:7f:
e8:13:56:54:f3:2c:fb:6d:b9:52:37:b2:51:9a:57:
9d:79:85:fc:b2:0b:6f:4e:f3:46:b3:59:ab:03:ce:
d4:1e:22:8c:08:af:e6:02:d0:19:9e:6a:5b:de:7b:
7c:44:74:bd:94:b0:03:2c:8a:ce:8e:a5:14:2b:d2:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:E2:0C:D0:55:6B:A7:B2:13:53:56:00:9C:5B:53:87:41:DF:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:bd:1e:88:29:62:f1:2d:26:7d:2a:60:83:8c:61:32:be:1d:
35:fc:0e:be:4c:b1:e5:05:b4:2d:c0:3f:f2:e6:cf:7b:52:93:
92:63:f5:85:88:34:5f:4c:6a:c7:e2:5e:14:09:69:65:4c:a9:
a7:56:5c:69:e5:3c:e7:2d:f6:38:b4:fa:fb:28:55:8c:69:c4:
a3:1a:10:95:e8:4c:7c:b6:97:21:c1:99:b8:52:03:77:25:ba:
0b:d1:68:b8:72:0a:08:cc:11:cd:0c:ac:ae:cf:70:6f:9d:f8:
98:47:95:82:70:07:64:6c:19:b4:1a:9b:0d:d3:92:2e:13:98:
c1:f1:a9:2f:3f:84:5d:a2:51:c5:24:92:44:9d:f9:e2:37:57:
7d:12:53:9a:f0:6a:99:f5:67:eb:3b:0e:7b:bf:12:da:b4:85:
32:29:f6:2c:81:89:b8:80:8b:2d:c7:25:80:46:90:ef:ba:0a:
80:ac:7e:a9:19:39:26:83:3a:2c:30:ce:38:b4:42:f6:38:29:
c5:3b:b2:1d:94:cc:3c:93:59:8b:2e:2d:06:c5:99:fd:91:95:
ee:f6:a6:f6:83:48:f0:81:4e:8b:2f:82:43:b0:eb:4a:77:60:
27:6e:34:50:0e:f0:6d:56:5b:05:ff:e7:3b:b6:4e:fa:d6:56:
37:4c:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:36 2025 by rpki-client