Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
File: 1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa (raw, json)
Hash identifier: QAoKoDUtCNI4dF6VkJOZBBhh9w3LuJs61ICfV3fTcdY=
Subject key identifier: D4:D8:76:85:7E:50:8C:53:71:D9:42:E7:3F:ED:86:4F:8D:16:8B:55
Certificate issuer: /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial: 010D0C9F4328584843B00A09E5BF0B1F1703B600
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 165.109.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:0a:09:e5:bf:0b:1f:17:03:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=e7a58a89-0d66-4272-b13d-dd408b2ca5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:48:38:7c:07:9b:22:ee:66:ed:b5:26:a9:c6:
f3:90:aa:c8:fe:38:d2:cf:7a:68:d8:53:e3:44:ae:
76:0e:fd:a8:d0:21:3c:79:78:24:56:28:fb:87:76:
8d:37:d2:a9:be:1b:b5:c2:93:0e:34:3c:53:d7:9f:
19:33:36:2e:1d:5f:11:58:e1:38:41:d0:70:f6:b2:
77:e8:64:da:28:51:b2:58:84:7c:7b:3a:64:c7:11:
03:3c:a7:5e:3f:ad:a9:1a:05:89:02:80:b1:b4:9f:
69:06:17:04:82:91:ee:77:d3:37:71:4b:48:16:19:
c3:a8:8d:a5:26:e1:3e:28:54:0b:15:2e:c3:05:59:
c5:51:56:fb:d2:31:21:a2:af:b1:31:6b:e9:72:25:
df:ff:b2:5a:7c:58:85:57:03:43:c2:12:b0:14:f8:
c5:8a:d1:b6:eb:3a:f4:cc:bb:1a:ff:c1:fb:ff:0e:
e7:06:7b:48:47:77:07:36:e8:72:a6:df:3b:1e:f6:
ae:20:17:b7:94:5c:38:23:d2:75:98:e3:b5:65:6f:
bf:39:7e:9d:22:e7:5b:fa:7f:0e:32:d1:4b:2f:ac:
e9:42:21:ce:c2:66:d1:d8:d8:a2:fb:21:82:2c:71:
f7:a8:e0:82:96:cb:64:0e:50:0b:e5:a6:7b:74:49:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:76:85:7E:50:8C:53:71:D9:42:E7:3F:ED:86:4F:8D:16:8B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl
X509v3 Authority Key Identifier:
keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
sbgp-ipAddrBlock: critical
IPv4:
165.109.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:85:90:7d:10:55:00:26:18:64:9f:36:bd:f7:93:a1:33:33:
d9:11:42:69:cd:41:2a:d1:69:6c:c5:d5:55:53:3f:31:d0:6b:
16:b3:1b:f2:14:19:0e:7f:8f:0d:0e:c8:a9:b7:8c:07:d2:70:
95:85:3d:d2:fd:d3:5d:c2:7a:1d:03:76:ca:cd:0a:2f:ed:50:
58:42:f1:c9:8e:ce:b9:b6:b6:4d:37:1b:67:74:c1:2b:92:c5:
56:74:27:0c:6f:b4:cb:40:98:2a:94:43:ec:24:b4:4e:99:92:
5e:66:42:82:83:ad:2b:77:da:0b:01:78:c0:f4:93:04:05:3e:
53:3f:db:b0:42:fc:1f:34:df:38:e8:49:a9:47:d9:f4:86:3d:
5b:c1:b4:24:44:f8:92:0b:87:84:53:12:4d:9b:47:47:16:a6:
ec:76:17:05:cb:9d:20:90:6c:25:df:23:b3:a6:92:59:9e:85:
ae:2f:90:9b:f2:36:b0:bd:08:af:61:85:2b:d1:8b:2c:b5:9f:
6f:fa:4a:1f:b9:5a:8f:80:92:64:a2:92:76:1d:00:8b:e4:99:
af:28:49:46:8e:64:f0:90:0e:f1:7f:03:a3:76:16:58:6d:4f:
28:43:44:e1:8b:27:a9:96:af:2a:77:b4:96:25:6c:61:8b:f2:
53:d9:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:38 2025 by rpki-client