Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
File: 7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa (raw, json)
Hash identifier: LWdsvnlFpuuLKOqN105IobUKxtU9AMM4R8aQwl/2MoY=
Subject key identifier: FA:93:28:AE:12:E3:FC:AB:E8:44:BC:5F:27:E8:3D:D7:5F:86:19:BC
Certificate issuer: /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial: 010D0C9F4328584843B00A1D6A2A860867DD7D80
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 165.109.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:0a:1d:6a:2a:86:08:67:dd:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=8a08fc71-60a2-4640-a65c-2f5a9aa32b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:ad:7c:68:e3:bf:33:0c:21:8e:95:ff:1c:
8d:a3:09:6c:33:c8:97:58:b0:46:50:e3:44:6c:b2:
f8:2a:e3:a3:36:e0:89:b7:72:8c:5a:8e:20:36:cd:
d3:88:30:56:30:ef:1e:c8:50:47:df:93:0f:0b:46:
ba:97:c2:c1:4b:ef:67:37:8b:77:6a:1f:61:eb:eb:
82:e4:0c:62:ee:fa:0e:96:fb:5f:d9:0a:16:a6:30:
dd:e1:3b:83:66:5c:e8:b8:d0:5b:20:f4:1a:d1:2d:
d3:24:eb:ab:d8:fe:0a:41:cb:27:c5:af:31:6e:f8:
36:b1:cc:9c:f7:ea:ad:78:a0:4e:2b:e7:4b:36:4a:
e9:2d:ce:6d:31:dd:a1:b2:66:39:f6:20:98:91:79:
dc:37:56:a9:94:8b:04:e7:45:16:af:37:b8:25:d1:
7c:35:29:20:40:a7:00:d4:64:d0:27:0e:19:e1:d2:
4a:79:80:ef:83:fa:8a:97:5e:67:80:ec:31:87:1f:
94:3b:cc:92:40:55:5c:0b:f5:80:74:fc:53:46:88:
13:dd:d5:00:d4:88:de:78:ff:17:1e:7f:ec:8a:40:
09:5e:b0:48:35:86:6b:3c:15:e9:56:06:d7:c4:2d:
6e:d6:94:26:f2:27:35:27:86:9a:5e:64:54:14:73:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:28:AE:12:E3:FC:AB:E8:44:BC:5F:27:E8:3D:D7:5F:86:19:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl
X509v3 Authority Key Identifier:
keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
sbgp-ipAddrBlock: critical
IPv4:
165.109.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:9b:01:64:97:42:85:9b:1e:a9:2f:22:38:2a:99:ea:b0:ec:
29:b6:45:8d:8e:39:26:f4:06:b1:4a:e3:e0:db:28:b9:9c:4b:
67:df:27:7a:f0:d9:02:44:55:f8:d8:7c:a7:4b:07:18:c2:ef:
f1:10:19:a4:cc:6b:7d:e2:05:bd:97:c1:aa:de:50:d6:b6:db:
e4:2c:d7:51:eb:6e:dc:9c:9e:19:3b:38:3a:6f:26:6e:bc:1d:
f3:73:00:07:a2:a4:b2:fc:9f:b4:e9:55:23:3f:92:c8:f4:25:
61:af:7c:21:6f:6f:ab:6f:83:a9:d5:a8:17:eb:a1:c0:06:93:
00:fe:37:1a:ad:18:74:31:51:64:64:c9:ab:e9:8c:92:5a:05:
6a:23:c9:22:ba:de:3c:08:d7:38:16:6e:9d:82:34:ca:a3:12:
1f:dc:89:a9:b4:7a:a9:3a:30:11:33:c6:82:fb:67:2c:41:5e:
c9:ce:43:71:d6:72:58:5d:db:05:f7:4e:af:11:23:90:7e:d6:
fb:bb:3b:34:4e:dc:25:7e:38:cb:97:8b:e8:93:b1:da:6b:3d:
39:4e:e4:3b:d3:ff:9b:66:fd:a5:3c:1e:46:70:98:ee:ae:84:
12:c0:93:f2:2b:4e:07:6a:21:83:e1:96:67:62:d9:0d:bf:b9:
4a:7a:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:53 2025 by rpki-client