Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa
File: 7cfb3343-9794-3299-b118-155e595370a9.roa (raw, json)
Hash identifier: nRzU3/6ea8xvGnCpuFUBGqfhYLeiLQQdA3DKt/T+CY0=
Subject key identifier: EE:E0:AF:87:AE:DA:66:03:E2:2E:73:8A:B2:FD:BA:F8:6C:A0:D4:3E
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F43285848573AD86CAC180413C767F620
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 399672
IP address blocks: 165.140.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d8:6c:ac:18:04:13:c7:67:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=bdedda01-46a0-425f-9c3b-0230dc14577e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:c0:18:18:44:6b:5e:9f:4e:9a:bb:a2:20:
18:dc:7f:65:03:40:e1:6a:d8:07:54:3a:0d:be:fe:
4f:79:71:ef:7e:05:6a:ba:f0:e6:5a:93:48:c8:26:
0e:70:bf:21:c4:42:91:d3:a4:14:db:5c:8b:b8:19:
b9:f5:b2:1b:79:82:85:ba:93:8d:4a:1e:16:82:a1:
02:1f:7b:37:78:6d:cb:cd:40:03:59:55:5f:e8:b2:
f6:1b:a4:89:26:71:66:a7:35:34:0d:e5:57:33:71:
33:16:4b:45:aa:81:a7:c3:0b:43:d6:42:5a:a2:64:
b6:06:4e:61:1e:f6:18:9e:c2:1a:26:87:fc:1d:50:
0d:70:95:9c:64:34:e6:eb:f8:c6:43:65:8b:ca:c0:
01:81:5c:e6:59:48:5e:26:46:5c:95:e4:da:7e:1d:
b3:83:d4:b6:70:9a:ef:11:de:d1:7f:60:5b:3b:8c:
7d:0a:fe:c0:75:e4:91:0d:af:b4:1e:79:47:61:da:
ab:6d:c4:83:9e:01:c9:9a:10:91:93:50:78:a1:47:
92:51:5d:b5:18:f7:de:62:2e:18:55:f3:3d:ba:f0:
3c:17:7d:e8:f3:0f:ed:1c:2e:61:e1:39:36:c6:72:
68:93:af:81:34:a3:8c:51:c9:8a:87:78:9c:67:37:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:AF:87:AE:DA:66:03:E2:2E:73:8A:B2:FD:BA:F8:6C:A0:D4:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:60:4f:7d:30:61:f5:99:75:a9:af:5d:85:0c:68:77:38:fd:
a1:0f:d1:95:a6:e0:a0:d6:f0:b7:12:d6:4e:1b:35:b8:1d:81:
5a:1c:bb:d1:db:04:e7:9d:6a:31:ed:45:55:0b:2f:de:74:9c:
ca:3a:65:04:63:c3:17:42:61:4e:67:64:fb:a3:62:ca:76:c1:
ce:42:87:06:8a:af:4d:c2:58:cc:ed:ff:e0:3c:57:4b:c2:e0:
e6:cd:cf:a6:36:71:2b:6e:bc:09:3d:5a:9d:b4:84:fb:dd:d3:
e7:cf:87:f3:5b:46:2e:f0:6b:59:99:0f:22:59:c0:0d:ae:70:
6d:9f:58:53:78:e5:0f:a1:01:5d:96:f5:4e:da:77:52:91:a9:
7c:9c:e5:f7:45:6a:22:51:c5:0e:a8:d3:69:aa:00:19:5b:18:
e2:5c:45:3a:af:27:66:f6:e0:da:15:44:8b:0d:c4:b1:c8:99:
ca:c6:e2:94:7a:41:fb:c5:cc:19:7a:23:b2:72:2d:42:fc:83:
b8:af:19:1e:3a:c7:82:40:ca:7e:56:c3:03:08:4f:a1:9a:69:
58:df:ed:14:5d:43:bf:b2:de:18:f8:5e:14:02:93:f6:46:45:
14:d2:74:58:b7:0a:dd:b0:ee:25:de:b5:b4:eb:fe:e8:d7:76:
30:41:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:44 2025 by rpki-client