Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa
File: 720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa (raw, json)
Hash identifier: MpjlkFK/QbS3rAu3pIKoZUGaskGSK61gzLC+dySH/Xg=
Subject key identifier: 03:CC:DB:E2:77:5E:2D:F4:B5:EC:03:DC:C3:70:18:E4:4D:AD:EC:FF
Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial: 010D0C9F4328584863CB0C3F36F97C28F33E1E80
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 833
IP address blocks: 165.140.200.0/24 maxlen: 24
165.140.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0c:3f:36:f9:7c:28:f3:3e:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=91c3b41d-9c48-45ae-8ced-4e7a89dd5c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:79:94:f2:bb:e5:14:c1:66:aa:44:48:e5:56:
90:80:c0:84:b2:13:57:20:ea:5b:63:58:e1:1b:9f:
f7:45:c0:e9:87:ff:50:d7:98:f0:04:ff:62:44:ad:
2b:e8:6d:89:78:f9:94:e7:a3:8d:c8:5f:74:ae:f9:
1d:6f:5b:21:d2:24:f4:c0:94:a2:8c:4f:81:28:2f:
58:aa:44:8a:94:6e:ba:74:06:5f:6b:61:6e:d0:41:
97:0e:5f:29:f4:86:fc:ba:01:ce:6a:b5:ac:ce:bb:
0e:3b:48:3c:d7:e2:de:14:6e:0d:38:6a:01:ad:1a:
69:b0:8e:de:53:a2:c3:37:1d:fe:c9:d5:ed:25:31:
6a:b9:f6:bd:af:4b:52:aa:a9:eb:0d:70:4c:b3:bf:
a1:cc:47:ef:c6:47:83:21:c6:94:ad:98:a5:86:b9:
de:ba:1c:57:b0:2a:cd:5c:1b:e7:60:f3:f8:8a:1c:
89:f2:cf:59:89:d8:cd:93:b7:f9:3b:47:14:92:e7:
fc:ae:08:27:0c:3e:cb:ba:4a:67:3c:21:0d:9d:7c:
ce:4b:77:b4:a4:c7:44:f2:3a:79:73:51:84:fa:cb:
f5:a4:41:b3:c3:9a:d3:10:da:37:ea:f8:88:00:ce:
55:d5:0f:e9:2c:0b:a8:11:95:df:45:51:3c:ad:51:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:DB:E2:77:5E:2D:F4:B5:EC:03:DC:C3:70:18:E4:4D:AD:EC:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl
X509v3 Authority Key Identifier:
keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:1e:7d:a4:e5:0e:ad:30:58:3e:d0:92:6d:c8:41:e2:fe:5a:
72:f5:32:a8:85:ba:7e:95:32:81:ea:f7:5a:5d:30:5d:28:3d:
28:43:e5:22:3b:c6:07:2b:09:bc:e9:61:83:45:32:bb:8b:c0:
c4:fa:1a:8b:de:8c:52:eb:a0:52:75:2b:fb:05:cd:91:1a:64:
2c:42:0c:68:6a:43:87:d2:5e:d1:6b:b9:80:44:42:39:3e:db:
85:6a:0d:fe:64:97:66:b4:5c:9f:5d:bb:72:f3:59:35:00:a5:
4d:08:84:47:20:93:f2:90:e9:41:c6:8a:81:5e:4f:f6:29:bf:
0c:6a:65:e1:02:35:ef:f5:50:ba:25:39:c9:23:21:16:12:af:
90:36:fd:78:ba:a6:77:62:bb:5b:ea:0e:8a:3a:17:f6:ce:24:
4b:9d:5e:c1:ea:d3:4a:80:4a:80:ab:66:94:a2:75:52:45:58:
7f:2b:c4:23:50:c7:bf:98:d0:61:b8:a6:75:07:d1:82:a8:ee:
26:09:ed:26:16:d7:33:44:67:c5:89:9d:9b:f8:fd:fb:5a:0e:
41:00:c3:c8:14:57:6e:0e:37:6b:aa:1a:0f:30:cf:2b:c5:07:
26:a3:a7:aa:2a:bb:92:90:bc:67:96:f4:27:32:2c:25:b4:92:
4d:01:4d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:20 2025 by rpki-client