Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa
File: 11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa (raw, json)
Hash identifier: gWpjAE6LuOmtKlF32QqlvVldWZGmdI3pmnsuSTe8FUo=
Subject key identifier: 5F:B9:58:40:0F:32:3A:CF:9D:E6:C9:60:B6:09:33:1F:96:14:89:90
Certificate issuer: /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
Certificate serial: 010D0C9F4328584843B00812CDDC5C77AE60CF00
Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 10967
IP address blocks: 165.130.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:08:12:cd:dc:5c:77:ae:60:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=dc7b687d-b4e3-44a3-aee9-3f3e2249c4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:66:9e:7d:6d:8a:89:c0:11:22:39:15:7e:
1a:da:bd:b8:c7:04:3f:f6:c4:ca:b2:48:9c:3c:86:
98:e6:73:25:d1:64:ed:d6:40:30:10:a6:2f:b8:93:
6c:4c:79:a4:34:fa:60:11:e3:12:f6:de:9a:71:95:
f8:e8:06:5a:e5:cc:cc:dd:a2:97:ea:6f:aa:88:11:
ca:95:b4:29:48:38:60:c6:22:85:7b:67:e8:70:b8:
89:db:38:32:0a:e2:83:be:9b:a3:88:ee:59:3f:57:
37:41:d8:62:79:2a:93:f5:99:c0:02:de:4f:63:16:
69:97:37:30:f5:5e:31:0b:a8:e4:b9:80:de:bd:6a:
75:4c:1e:b2:25:1b:94:d8:fa:b1:48:f3:2c:7e:45:
02:16:93:56:b0:56:52:24:73:7f:eb:a6:d7:9f:5d:
19:f0:2c:48:8b:12:63:c9:32:cf:36:12:53:4a:56:
6e:43:29:a4:95:59:17:b2:3b:21:cf:6e:57:b0:c7:
8b:3b:f2:90:6b:1d:bd:1a:5a:b5:32:3c:cf:69:88:
fb:64:37:59:23:5c:1c:bf:27:99:42:1b:d0:d2:cc:
84:9b:3f:99:cd:86:ce:23:cf:8f:68:be:2b:68:7f:
30:74:d3:ae:90:36:9a:c3:52:31:8d:07:7b:bb:13:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:58:40:0F:32:3A:CF:9D:E6:C9:60:B6:09:33:1F:96:14:89:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl
X509v3 Authority Key Identifier:
keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
sbgp-ipAddrBlock: critical
IPv4:
165.130.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:97:c2:9e:f5:2c:7f:ed:40:93:1b:ce:b1:96:d6:b4:55:c4:
d6:4a:48:40:7b:83:37:65:83:86:1e:fb:fc:54:54:84:aa:0b:
fd:94:80:b2:4e:75:13:5f:24:aa:b2:db:dd:04:f1:e4:e5:54:
b1:e4:8d:04:cf:93:b8:6e:4c:c3:9e:51:e0:6c:62:40:cb:4e:
46:66:f2:53:da:b8:04:39:22:f2:84:3a:ac:88:29:bf:93:3e:
da:14:e8:37:e3:1e:a1:dc:f8:77:23:76:8d:90:81:ee:ab:21:
16:54:d1:55:8a:16:b9:b5:47:2a:d9:88:82:ea:38:74:5e:c2:
08:70:c1:a7:ab:77:49:26:90:38:76:c4:a3:c3:b3:73:f1:ec:
b1:00:68:42:f9:6e:f3:83:5d:b9:9a:2a:3b:a5:d0:34:9f:c7:
79:ae:f1:f8:97:f5:7c:ef:68:66:cf:0a:2f:f6:f4:2e:c8:32:
bf:12:83:5f:e7:74:a3:c1:f5:50:9d:2b:7b:8f:ce:bd:ca:d7:
94:a8:f1:56:17:9b:e3:35:8b:81:6d:43:f2:61:2e:b1:5d:0e:
b8:d4:ce:e7:79:f2:05:8b:23:c1:14:fd:50:27:21:54:82:bc:
53:fd:58:af:90:d5:fd:bf:b9:0e:8c:7f:4e:b1:88:47:8e:c2:
95:c1:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:25 2025 by rpki-client