Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
File: 5b65963c-d23f-31a3-b848-4132887683b8.roa (raw, json)
Hash identifier: X8ZUNDURS+SOFozAzCYs2E+IysclJ9mf6RjNKTbqsPE=
Subject key identifier: AE:D7:AB:A1:49:53:CC:D3:35:C5:C2:4E:D1:8E:6D:76:EB:C7:4B:E6
Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1
Certificate serial: 010D0C9F4328584824FA88A30AC882A7A3F42580
Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 395400
IP address blocks: 168.123.0.0/16 maxlen: 17
192.149.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:88:a3:0a:c8:82:a7:a3:f4:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=9a382426-1f18-4ad7-a2a7-10dbe233c99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:61:ef:b3:b7:0d:9b:ee:80:b7:53:74:78:
d1:84:d5:ca:c9:db:49:f4:f4:66:45:e6:9b:ac:a3:
e8:d4:7e:88:dc:df:1b:5d:0e:e0:e5:f1:0c:33:7c:
fe:1b:05:e7:af:e2:26:09:2a:37:8b:8b:4d:d5:3d:
53:f0:f1:2b:b5:f4:02:f4:af:0a:d9:05:9e:99:25:
1c:44:bb:07:8d:10:8e:06:e7:f3:6e:24:ae:c6:f8:
ac:34:20:8e:5c:fa:e1:bf:dd:5f:07:56:87:83:5e:
c5:9a:70:4f:95:96:23:77:cf:f3:d2:82:ce:c3:78:
28:a2:7b:df:c6:3a:1a:7e:f0:56:b4:81:d8:db:e7:
20:22:0c:7f:a8:2d:ed:69:1e:8f:98:b7:bd:b8:74:
aa:c2:c3:41:25:98:a4:50:af:75:a5:5e:70:61:0a:
98:bb:7c:22:30:23:17:b6:35:d6:96:d4:82:27:53:
d4:4d:49:5e:6b:6d:6b:22:b6:a3:4b:9a:2d:33:5f:
92:ee:d2:ae:bd:b8:13:27:55:69:15:ff:e4:a0:65:
21:f7:3f:82:9b:5d:23:e6:8f:b0:7f:73:a1:e2:dc:
e6:61:01:11:82:a6:61:8d:f2:81:34:cc:6c:88:31:
ed:45:9e:81:75:43:1a:3f:37:b3:8f:7c:31:e8:21:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D7:AB:A1:49:53:CC:D3:35:C5:C2:4E:D1:8E:6D:76:EB:C7:4B:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl
X509v3 Authority Key Identifier:
keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.123.0.0/16
192.149.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:90:91:55:f5:22:ac:dc:f7:ac:30:f7:44:ea:c8:c5:db:a8:
53:a8:46:02:83:4f:30:07:03:6a:60:0d:6d:6d:af:e7:6f:ec:
33:4d:61:17:06:80:05:53:87:f1:21:90:0b:22:b1:fe:5e:5c:
4b:e4:cd:d8:af:08:aa:3f:8c:ea:f3:bf:4f:10:9d:16:44:16:
0e:03:b0:d6:69:35:b1:09:7a:d1:e0:e6:7f:f7:60:c2:2b:44:
8a:ff:44:47:57:61:35:df:73:a6:f7:e0:fc:15:48:49:b1:d4:
7b:4c:75:65:5b:04:df:f1:09:37:7f:9e:d1:82:c5:21:7f:1c:
93:7a:19:b8:27:06:39:b2:ca:4a:5b:1e:0f:e7:43:5e:19:e2:
9c:34:73:b0:8a:62:97:b3:7d:b1:e1:36:6f:d5:54:54:af:14:
a2:ed:2f:83:13:1a:15:e1:1c:89:fa:81:82:b7:ef:d0:c7:01:
bd:56:97:4c:b9:2c:e6:b8:e1:54:81:84:25:b7:90:43:e4:01:
18:36:eb:91:da:0d:b7:cf:72:fd:7b:ac:e6:12:8b:73:68:85:
57:15:d9:99:be:45:60:62:91:39:65:b5:8a:2b:e1:cc:66:4b:
09:18:42:88:c0:60:fb:09:73:80:b0:d3:c9:45:12:0c:e1:f3:
2a:84:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:55 2025 by rpki-client