Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa
File: 81971457-da63-315b-a46b-b1f35234d76e.roa (raw, json)
Hash identifier: c/JUisSR88KS6nVRttcL/0MmEbWvSygonGInlq05W2k=
Subject key identifier: EE:DE:93:29:9F:76:DB:57:51:BA:55:F3:4A:C9:08:18:4A:10:82:E4
Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d
Certificate serial: 010D0C9F432858484EDACF6D2A25E9D165C16E00
Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 3214
IP address blocks: 23.165.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:cf:6d:2a:25:e9:d1:65:c1:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=9c499d99-7054-45f5-8823-ffaa112299be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:2e:9e:17:b2:85:b5:9e:4f:a7:02:45:00:
49:fc:85:66:73:77:13:d9:2e:60:89:bc:e9:dd:98:
23:4a:25:b5:07:54:6d:46:12:a9:d6:8c:74:f2:ca:
e7:81:fa:8d:e1:3b:07:2f:36:36:aa:a0:e2:f2:cb:
a5:3d:73:5c:63:54:44:ab:f7:e2:5f:e3:78:45:05:
32:de:9e:37:56:8c:f9:0a:d0:bd:8a:c0:1c:37:82:
24:85:a2:e8:d3:91:1e:86:34:f4:fa:0e:ae:46:c4:
14:88:2b:bd:4e:1d:be:12:30:0e:06:82:ae:19:4b:
1d:da:44:a3:14:b8:18:25:4d:ca:11:6e:00:b6:0b:
c3:8b:3d:aa:f7:0d:49:5c:8d:d1:97:ec:4f:66:d3:
d6:bc:1a:7d:f7:ee:e9:1a:28:b6:79:f0:1d:88:4d:
09:45:2e:0d:ec:2e:30:fa:ff:e8:43:c4:91:d7:b9:
1c:08:78:b5:bd:3d:62:f6:46:bc:65:0d:d3:44:08:
c2:77:12:2f:97:39:43:d5:17:14:d8:0b:18:14:e5:
20:b1:8e:ce:53:cc:fa:5a:6a:fa:39:4a:26:58:4f:
46:08:af:5d:72:97:33:32:ea:6f:3d:46:df:50:66:
74:4a:4b:f8:35:16:e6:8a:1f:d4:03:ba:1d:d5:dd:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:93:29:9F:76:DB:57:51:BA:55:F3:4A:C9:08:18:4A:10:82:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl
X509v3 Authority Key Identifier:
keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:fe:d9:25:da:0b:bf:1b:b2:b5:25:85:95:ec:f9:9d:d8:69:
53:a5:81:51:2c:0d:19:45:6a:ad:c2:62:a6:72:55:7c:e7:8b:
bf:a6:e3:ab:ff:eb:f9:68:03:e2:d6:83:db:8d:4e:ba:aa:10:
ec:36:8a:ad:b3:a9:d3:48:8b:b9:68:96:40:8e:dd:b0:8e:2e:
6d:a0:b4:b9:a1:bf:e1:f6:f4:71:00:9f:b6:bb:3d:91:3a:70:
a7:f6:6e:91:ff:83:96:eb:d7:9d:f1:5e:0a:4c:df:f8:7b:f1:
b2:93:f3:c1:77:5e:45:64:7a:63:4c:22:ba:ae:ae:c1:1e:39:
1e:09:8b:79:c3:5c:29:59:bf:1f:64:c9:44:69:b5:7b:39:85:
fa:31:df:9e:49:31:4f:12:ab:3c:2c:8d:b6:6d:21:79:e2:f1:
5f:24:52:bc:6f:19:2e:46:2c:5e:93:0b:6b:23:d5:63:8b:1e:
20:b6:85:b6:20:49:0f:4e:5a:62:85:84:5c:d3:62:f6:40:a0:
7d:e9:bf:53:01:db:f0:d7:3b:3b:e8:79:11:46:9f:4a:61:9b:
bb:dd:d2:3f:39:c0:45:a8:fd:8b:9c:8b:b3:23:fb:3b:fc:07:
51:37:bb:ef:68:3d:ad:f3:c7:c1:1b:18:73:07:80:a4:33:51:
09:ed:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:16 2025 by rpki-client