Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/cdf466d6-6227-34d8-b72c-65f0acf3e7d5.roa
File: cdf466d6-6227-34d8-b72c-65f0acf3e7d5.roa (raw, json)
Hash identifier: Y+YCUQaH3xzc1bxJ4iYzUvnPhacb1pBYrtzKZLKHS7c=
Subject key identifier: 09:D5:23:66:AE:44:DA:81:03:DC:C3:9F:DE:56:DD:46:BC:82:8A:C2
Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial: 010D0C9F432858483E1AB05C3747A1AD3FBC7D80
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/cdf466d6-6227-34d8-b72c-65f0acf3e7d5.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 134729
IP address blocks: 65.181.128.0/20 maxlen: 24
65.181.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b0:5c:37:47:a1:ad:3f:bc:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=afc5cf85-7a30-404a-8e8c-fead71d3fc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:93:a4:2a:f4:ec:73:d7:1f:12:b9:fa:b6:9a:
63:b8:16:ab:45:e9:6a:9b:79:13:0e:4c:9d:b3:00:
e6:01:99:4f:aa:48:43:58:3d:3c:ba:c5:ca:b8:e8:
29:e8:1d:10:5b:6b:47:1b:17:2c:95:58:c5:49:83:
36:d3:96:03:b8:73:16:1d:4c:79:a9:8b:24:a1:b1:
2b:9c:d5:dd:b5:5b:e5:19:4b:e4:21:58:8e:82:b4:
8a:01:db:76:5b:76:97:0e:d5:55:a6:48:b9:11:0b:
ca:46:00:7c:d2:fc:ad:e0:db:ec:8f:8e:b1:43:da:
28:55:3b:df:40:1c:37:b6:01:23:c7:2f:a8:51:ef:
69:2e:cb:07:02:db:30:ef:ca:0a:e1:ab:7a:07:d0:
c9:02:05:b6:ae:13:31:6e:f9:73:80:1a:df:3c:84:
f7:5d:be:5f:51:12:44:b0:d5:2c:1f:cf:96:e0:fb:
5e:9d:f4:15:fa:55:06:a1:5d:9b:6e:75:6a:07:57:
1e:c3:6a:3a:04:1b:31:f1:52:22:b7:e6:bc:a1:5c:
21:9c:4e:0d:59:98:92:f8:4b:ab:f1:fd:7a:ef:f1:
d2:a7:74:42:fb:fa:b6:ac:e7:ea:5c:1e:a5:c1:a8:
5f:a3:c9:1b:3f:eb:28:42:ec:b1:ca:d5:97:ba:92:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:23:66:AE:44:DA:81:03:DC:C3:9F:DE:56:DD:46:BC:82:8A:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/cdf466d6-6227-34d8-b72c-65f0acf3e7d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
X509v3 Authority Key Identifier:
keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
sbgp-ipAddrBlock: critical
IPv4:
65.181.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:f9:31:84:0f:b0:19:b0:dc:94:98:a0:69:97:90:48:12:29:
6f:59:7a:e9:51:a8:4c:e7:3a:90:6b:51:71:a1:41:80:3b:bc:
7c:ed:7f:26:bc:e0:b5:21:3c:45:dc:ae:a0:74:ed:f5:4f:81:
2c:c6:26:60:21:85:1b:a0:b1:90:be:6e:fc:b7:7c:fd:3f:c2:
b7:45:50:81:3e:e1:bf:61:1b:ee:a1:2f:47:1a:5c:b7:20:27:
ef:09:3c:b4:51:03:29:25:a3:71:5c:ed:7a:13:44:2f:ac:a3:
7f:44:b4:5d:a3:4a:ac:e0:5c:4c:fc:b6:f9:85:e6:ab:7d:1b:
55:cc:d3:3e:ac:96:ee:21:b4:fa:ea:ce:96:02:ba:e8:a2:d7:
8a:d7:92:5d:5a:f9:5f:67:1c:a0:78:5e:63:4a:e4:f6:29:89:
85:c3:87:34:cb:77:ec:38:f4:65:6b:3d:f1:e7:a2:fa:e0:eb:
6d:4b:c6:e1:ef:0e:e3:00:a8:8d:3a:53:42:86:3e:d1:a4:20:
52:cd:b2:b5:64:0d:9a:09:3a:4d:e7:e3:cb:b5:26:e4:16:30:
82:5d:e3:21:a7:75:41:d2:c4:8f:1d:d1:c0:a3:a0:31:85:4c:
9e:08:fc:c8:8f:3f:bc:99:16:32:25:25:f7:18:95:2a:f7:58:
4e:32:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:23 2025 by rpki-client