Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/4b24d41f-0bb9-3f0a-a071-a75891e7036f.roa
File: 4b24d41f-0bb9-3f0a-a071-a75891e7036f.roa (raw, json)
Hash identifier: UJRek7iC7oZw4UZdigxkqm9mHmYhqmthsVGg6N5i9rg=
Subject key identifier: 86:76:3F:23:01:97:AC:8E:CC:FE:F8:F9:1A:27:C3:05:8E:7E:27:10
Certificate issuer: /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial: 010D0C9F4328584843B00A61B72A05E64AFFAB00
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/4b24d41f-0bb9-3f0a-a071-a75891e7036f.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 165.109.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:0a:61:b7:2a:05:e6:4a:ff:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=4261447c-a8bf-4329-927a-d56463770b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dd:09:54:3d:e8:0d:f7:e9:f5:41:b9:de:88:
3f:2b:8e:bd:3c:ae:2a:8b:73:1e:58:a3:33:12:6a:
e4:23:8b:29:38:74:61:ce:86:e8:2d:56:d0:0d:7b:
55:d0:c7:07:7c:97:d0:a3:04:87:b3:95:7f:e4:36:
e0:33:e9:77:1d:b4:02:5b:b5:62:70:87:29:27:0a:
50:55:19:b2:98:46:65:80:98:44:ed:99:7c:12:31:
85:84:58:fa:a6:88:98:22:31:8e:09:c9:4a:40:0f:
b0:60:c7:84:c7:37:cb:3d:79:27:d1:2f:72:e6:fe:
e2:27:60:07:6c:b4:9e:2d:59:9b:00:b2:04:31:75:
8c:3b:7f:49:dd:43:ff:6d:93:e8:09:46:44:13:31:
da:82:3d:cb:c4:07:de:91:3c:ec:0f:0b:bf:eb:99:
05:d4:09:6a:06:92:6f:c0:99:d8:1f:0d:59:09:e6:
ab:70:9b:d6:74:30:52:75:00:ab:3d:3f:43:b9:20:
72:ea:e6:da:f4:27:64:76:38:53:15:dd:b5:b1:fd:
40:28:44:5c:fa:5f:4d:3c:b1:ac:4a:bf:bc:ee:04:
b6:e3:c0:3a:13:40:f8:38:32:39:f3:3f:46:39:24:
2d:7c:fd:2b:83:99:22:86:07:8c:bd:71:d3:a6:bc:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:3F:23:01:97:AC:8E:CC:FE:F8:F9:1A:27:C3:05:8E:7E:27:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/4b24d41f-0bb9-3f0a-a071-a75891e7036f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl
X509v3 Authority Key Identifier:
keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
sbgp-ipAddrBlock: critical
IPv4:
165.109.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:b8:46:23:e6:9a:0a:37:d6:65:94:04:4e:80:8d:01:0f:81:
85:6e:26:5f:9c:0f:95:ce:42:74:97:fc:30:54:dc:a4:6f:6d:
62:db:7f:d0:ab:42:f9:c3:3f:54:78:de:db:f9:66:51:26:46:
fa:0e:97:73:95:f5:97:21:ef:51:af:c2:1f:99:21:a0:f3:bc:
f2:2d:2b:e1:45:fb:5c:37:40:67:f1:6c:99:9a:7e:24:d0:02:
4f:54:be:1c:54:08:50:3e:6c:88:d2:d4:31:31:c1:cc:71:8d:
83:02:31:8d:e7:f5:be:50:7c:c4:05:2c:1b:c7:31:99:2c:f3:
62:d5:9e:a7:3d:dd:52:51:e2:9d:77:a0:a7:10:86:cc:a7:98:
f4:58:0f:23:53:dc:be:b7:64:5a:bb:5d:87:ca:56:76:20:75:
ec:20:0d:45:77:f4:4c:96:b4:5f:89:dc:f0:78:5d:27:1f:a4:
a1:54:28:82:df:af:ca:b2:5c:aa:cc:e1:b3:2a:b2:e1:3e:83:
01:36:d6:33:b7:d1:4c:eb:e0:53:05:38:81:6b:66:4e:8a:29:
49:70:03:48:ce:0d:02:48:9a:26:58:31:93:5f:82:65:4b:3a:
01:fa:71:a4:0c:1d:13:fa:11:30:ef:50:b8:25:23:3d:6b:dd:
32:dc:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:30 2025 by rpki-client