Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4b4c128d-f3a7-3c54-aad8-a115525ef2ef.roa
File: 4b4c128d-f3a7-3c54-aad8-a115525ef2ef.roa (raw, json)
Hash identifier: CNxR+8DWoDb24M4IYm7vOktOAO8RNDwcruEI1XovKtA=
Subject key identifier: 23:20:D7:7D:07:4D:C5:06:8F:A8:32:3C:21:6A:87:54:B1:ED:41:98
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F432858485F9ADC96A10633261B4ED180
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4b4c128d-f3a7-3c54-aad8-a115525ef2ef.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 3214
IP address blocks: 65.49.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:dc:96:a1:06:33:26:1b:4e:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=bfa1201b-56ad-4fc2-8c8f-177d4e62dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:a8:ea:2d:57:aa:0f:1b:68:40:98:21:5c:
5d:c7:57:a5:ae:00:50:5e:2c:e8:4a:ed:37:1c:f3:
96:af:84:fc:42:13:93:84:2a:1d:e1:c8:6c:a9:5b:
48:22:eb:c2:f6:a5:ba:b1:1b:36:58:06:c6:f1:ae:
3a:a0:cd:db:8d:2a:08:b9:5a:d9:fa:45:df:8e:ad:
f7:9e:07:47:a0:5f:17:3f:39:f4:32:b7:24:6a:38:
dd:83:33:4a:04:9f:73:cd:4d:f0:9e:34:fb:04:6c:
e7:1d:27:48:8a:cf:42:02:c0:1f:d5:d4:74:c1:38:
96:b8:fb:40:07:71:18:8d:4d:94:3d:ec:ec:9d:d8:
da:b6:1d:27:c1:f0:2a:40:07:86:c1:a1:0a:cd:54:
0e:45:41:77:c1:ee:b1:e5:b8:f1:79:29:26:6e:35:
db:15:a3:29:bc:e2:a1:95:84:73:0e:7c:d1:35:a4:
4f:6b:85:eb:8c:0c:dd:53:83:9d:0d:00:a0:85:c2:
16:7d:24:e9:1b:4c:67:d6:fa:b4:69:76:21:e6:ed:
7e:84:d7:00:6e:7c:6e:66:01:8d:68:95:de:8d:a6:
71:e9:86:8e:7d:08:ed:ba:04:3b:45:46:d1:20:fc:
b5:f1:c9:de:7a:5e:06:6a:28:9d:2a:d6:07:6f:93:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:D7:7D:07:4D:C5:06:8F:A8:32:3C:21:6A:87:54:B1:ED:41:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4b4c128d-f3a7-3c54-aad8-a115525ef2ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:eb:af:33:19:75:87:c9:2b:25:e3:d1:0d:f3:d5:4f:b5:95:
eb:70:0a:34:cf:d1:10:13:6d:86:ee:bb:f5:86:bd:41:9c:c9:
cd:82:f3:c9:aa:1c:3d:78:33:b5:d9:06:39:41:a0:7a:e6:84:
b0:29:38:1d:d3:14:45:72:a5:89:b2:59:48:2b:0e:d1:53:e7:
55:b6:0e:c2:cf:82:11:e9:a0:89:8e:1a:f0:88:24:be:00:8a:
85:ac:74:90:c0:64:58:ca:90:63:01:0c:d8:97:4f:e4:51:f0:
4e:ad:20:5d:af:49:79:ff:42:0a:ce:32:33:0d:64:76:6f:41:
3a:ab:41:69:7f:de:32:86:17:01:be:ac:78:79:5d:65:22:08:
0b:aa:58:60:33:8c:43:74:1a:8a:04:3e:75:05:fb:dd:6d:d6:
d4:59:ff:79:f9:86:86:9b:ac:66:cc:b0:91:a9:7c:fd:8b:b1:
4a:af:3d:85:25:38:91:48:7f:94:5f:61:4c:f2:e8:d4:9b:35:
0a:f3:12:23:86:c6:ea:48:eb:5c:3e:f7:7c:fe:da:bb:c3:00:
49:12:53:37:ff:6b:b1:61:b3:14:49:a4:16:ff:43:6e:1b:71:
b7:04:ef:62:f4:2b:94:bc:29:c9:dd:2f:cc:85:7b:af:b7:80:
45:59:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:57 2025 by rpki-client