Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa
File: d04651b9-e83b-3291-aafb-6299b726c5b4.roa (raw, json)
Hash identifier: X/DKr7Df2RxYJnrHfLucfnL4INrYI3eOWvlpYAjGgJ8=
Subject key identifier: D9:77:CE:2E:56:09:25:C4:5B:D3:B6:C5:38:80:E9:BA:36:DD:AE:05
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584838855DCDAC153179EA7A09C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 1225
IP address blocks: 165.254.21.120/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5d:cd:ac:15:31:79:ea:7a:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=f7e2b307-9843-4b97-a78c-2a2c416b913a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:d0:2c:9e:5e:14:1d:3e:30:30:b1:bc:24:
4a:70:b1:91:3c:7e:49:c2:4d:b7:fa:d1:84:d0:fe:
1f:9a:0f:cc:d3:53:b0:f7:3a:06:3c:27:86:29:76:
66:7d:9f:c4:01:0f:da:27:36:9f:dd:fe:b5:aa:49:
72:42:8d:28:d6:62:73:eb:1a:73:7e:a9:ee:a1:54:
7d:27:4c:7d:3f:06:45:f2:7b:3a:76:d9:3d:0f:c0:
66:3f:1a:0e:db:77:b3:9c:35:bb:cd:1c:18:77:c7:
83:7e:8b:ab:16:37:3b:4b:8a:54:7e:d6:96:42:5c:
c1:30:66:e7:de:be:d8:95:e5:58:4c:11:e8:49:ff:
a5:f3:bf:df:0f:86:83:16:99:9c:08:05:de:05:42:
17:f2:0d:47:72:73:02:45:ed:da:3d:c6:e5:a2:42:
bc:b6:b3:bf:6e:6b:c6:5d:83:8c:da:73:7f:7f:55:
41:da:8a:b7:8d:4a:32:6f:46:67:18:00:b0:e7:79:
9b:69:34:5a:6e:90:15:fb:ec:04:1a:57:b7:85:cc:
aa:ba:d7:20:96:a8:06:8f:0a:f8:e5:59:da:f6:17:
c7:f5:dd:01:27:3d:83:31:f0:ed:c9:cb:72:aa:2a:
db:64:84:0e:4d:68:32:0d:9e:4f:1f:bc:16:4e:89:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:CE:2E:56:09:25:C4:5B:D3:B6:C5:38:80:E9:BA:36:DD:AE:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.21.120/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:fd:3f:f5:09:34:c4:5f:91:8c:a4:33:54:ec:a4:e4:89:e9:
f4:63:f5:67:7f:cb:40:3b:cb:eb:81:6a:14:8d:d7:85:98:32:
f7:09:fa:32:ec:6d:d0:9e:b1:4c:70:56:d2:60:bf:df:75:6a:
2d:68:85:30:84:79:12:d5:a9:91:4d:ce:40:22:f9:22:33:59:
70:1e:5e:cb:19:69:00:37:b5:cd:75:ef:45:c0:05:d7:c6:7d:
c3:1a:1c:4d:03:d7:06:08:2b:2b:58:c8:9c:45:97:a5:5b:33:
63:1b:47:b4:15:42:ad:b6:93:19:61:96:d6:75:4f:f4:13:08:
77:9c:91:ec:8d:53:ac:bf:6e:e1:6d:cc:ef:0d:64:a7:0a:55:
ed:b1:51:dc:84:06:25:05:2a:f6:e3:30:3f:aa:60:f2:b6:d6:
c0:9e:79:b4:2c:9f:4f:15:e8:13:0d:13:66:fe:a6:f8:aa:1e:
a5:da:5b:15:4a:57:88:6c:2d:22:88:df:2b:bb:27:07:33:b3:
82:fb:e7:e9:ea:2b:64:0d:e3:69:9a:07:ad:1a:c4:0b:96:68:
a3:a6:14:df:d2:a9:60:22:b1:e2:ee:2c:a9:92:95:db:5d:7b:
69:84:34:c9:9e:a9:47:c2:66:95:50:48:51:81:59:e1:59:2a:
1d:ce:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:03 2025 by rpki-client