Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa
File: 52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa (raw, json)
Hash identifier: p46EsDVlI5nuo1FKOO6Fm0QM+rfYa9562EvsYgiwoTs=
Subject key identifier: 91:B9:C7:F7:47:82:B2:83:F3:73:5F:E0:7B:30:35:F1:61:90:28:BD
Certificate issuer: /CN=cf6e862f-83c2-4143-b47a-74db6f210162
Certificate serial: 010D0C9F432858480EA5114B5D7DD4EC0E7D4700
Authority key identifier: 4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 400034
IP address blocks: 165.140.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:11:4b:5d:7d:d4:ec:0e:7d:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6e862f-83c2-4143-b47a-74db6f210162
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=5c78dbdb-9809-40d8-982c-d6ac96c2b134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:43:bc:ad:7f:15:74:61:87:da:2f:be:67:
16:89:35:eb:9e:ad:d4:99:25:de:ad:c7:a3:23:e3:
ca:3b:9b:66:08:f7:f6:cd:66:76:01:09:69:aa:e4:
c1:69:b4:93:4b:e3:de:4a:72:8c:fb:be:63:2b:7f:
da:14:a5:03:e5:b8:80:c6:7e:3e:7d:40:a7:1d:be:
f2:a2:1e:8f:d5:77:b4:6e:37:fe:43:7b:98:3b:22:
84:e0:9a:99:33:82:cd:37:50:15:f1:38:de:85:13:
0b:7a:fb:ec:cb:7e:02:b8:83:01:39:45:ae:b0:d0:
ed:2e:a5:5d:db:26:92:85:75:ba:45:ce:fc:44:2c:
cc:7b:05:c3:84:a7:83:d1:3a:eb:6b:49:cd:01:9c:
c2:94:5a:a3:8c:0e:40:6c:1f:20:23:69:97:89:52:
06:ad:cc:a5:16:92:ef:cc:20:a0:d1:4b:8b:8b:c7:
5a:bd:d7:0c:e8:80:7f:00:29:5a:84:7a:5d:35:5d:
98:1e:44:86:bb:78:c5:ca:1e:4a:91:3e:ff:10:f2:
80:7a:c1:f1:bc:b8:13:a4:b6:9b:f5:a0:51:c9:19:
67:e3:ab:98:24:fa:da:ae:cd:56:dc:9d:1e:ea:4e:
1b:06:bb:b7:01:a1:57:a1:c7:86:2b:08:5e:2f:b6:
ac:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:C7:F7:47:82:B2:83:F3:73:5F:E0:7B:30:35:F1:61:90:28:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl
X509v3 Authority Key Identifier:
keyid:4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:8f:ef:d4:74:4c:95:2d:57:2b:ee:50:24:da:28:74:b7:8b:
5a:a2:8e:a7:bf:2c:93:5f:77:ec:c6:24:30:d2:2b:a0:d1:2c:
d2:48:85:2f:a9:5c:68:d2:ad:76:f6:51:5a:b6:1d:c9:2e:ae:
6d:d4:f5:11:2e:29:88:86:3d:74:48:c9:d0:fe:94:ec:45:2c:
f9:9d:e4:53:75:cb:ac:14:b2:d7:95:af:4c:b8:54:f3:3b:85:
dc:cf:c9:0b:ec:62:b2:76:c9:f4:f6:d5:47:98:3c:ec:02:06:
57:19:96:52:88:82:0e:da:da:41:37:d1:8c:9d:b8:c1:4e:e6:
2b:45:ad:48:eb:19:20:df:34:1a:f2:8e:b9:41:cb:bd:3a:08:
5c:56:f0:de:16:0d:9c:e1:60:01:4b:e4:5c:14:3c:7d:cf:0d:
6b:6a:45:24:68:63:9f:78:8f:c7:28:72:c9:6b:88:73:96:65:
c3:34:9a:3c:90:3b:c5:42:d9:d9:ec:cf:fc:5a:ee:79:ab:c8:
11:35:6a:6e:65:fb:58:17:4d:de:19:bd:d5:93:51:76:da:2d:
07:6c:a8:ca:b8:78:3c:c7:6e:a1:5b:7f:1b:58:08:10:3c:b5:
a6:f2:ab:8e:01:d4:30:c4:93:5e:b5:a4:af:14:5a:85:2a:83:
c9:44:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:02 2025 by rpki-client