Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
File: f15a33ca-7a2d-307f-98ec-5856967563b3.roa (raw, json)
Hash identifier: /WpfNuDtM9y6y9eN74vkaLdzg7sQ1rxQVMmPG3qPQGg=
Subject key identifier: 7F:62:F1:D9:17:95:43:DC:A2:CD:72:42:75:74:0B:BB:2C:A6:B7:04
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F432858484D75958E80532C535E6A7080
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 54574
IP address blocks: 65.49.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:95:8e:80:53:2c:53:5e:6a:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=66fb014c-f4dc-4c38-b391-df4ac6d47436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:85:53:2f:44:13:7f:f9:c5:5d:37:4d:89:
09:cc:d9:6f:6a:e2:0f:5f:28:43:c4:cb:16:58:aa:
4e:99:4f:2e:76:52:c5:45:62:5c:c8:21:a8:f5:38:
9e:c1:47:03:80:86:4c:e2:32:9f:df:33:69:25:a7:
bf:1a:b1:54:8f:12:d1:df:c3:f3:45:85:55:02:76:
a4:a4:af:44:f2:d9:c9:a7:31:5d:3a:b0:0b:5a:cd:
ad:f2:2c:d5:32:17:09:88:7b:d1:12:10:42:c3:08:
72:41:78:53:6e:da:05:56:02:75:44:3a:af:f5:2b:
b6:7a:56:85:06:a2:e0:c1:a9:60:79:64:9f:08:5f:
11:75:96:70:b9:e8:43:3d:f8:29:cd:fd:18:2f:50:
92:e9:60:d3:20:ee:29:6b:13:f9:4c:3d:78:6b:22:
c7:0e:ea:86:4b:d3:55:9a:b3:30:df:9d:f7:92:0c:
c4:f7:98:55:23:ca:d3:a1:cf:70:20:94:bf:1d:cf:
ad:4e:76:de:42:31:63:3e:76:23:5e:b6:d9:3d:7b:
50:cd:e7:66:b5:f1:74:13:60:c6:37:49:48:4a:d7:
56:1d:3a:50:b9:9c:81:b1:84:54:24:ab:08:9f:35:
6b:c1:6a:ac:09:13:b4:95:0f:8f:a6:b3:70:6b:0f:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:62:F1:D9:17:95:43:DC:A2:CD:72:42:75:74:0B:BB:2C:A6:B7:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:e1:e9:b7:3d:9f:c9:6e:a5:50:04:fe:aa:53:3b:60:49:b3:
09:eb:1d:b4:94:d9:62:94:fc:45:39:ef:e9:42:46:79:3d:5a:
46:db:6c:0b:53:1d:11:11:5e:bf:a8:a3:ac:2e:8d:e6:b5:bc:
90:27:6f:19:e3:16:e5:24:ea:40:c9:33:3f:e8:c3:4e:a9:cb:
16:fc:47:50:45:47:73:93:c9:1c:b1:e1:c5:41:58:1d:ae:96:
51:9f:bc:b4:a3:66:ec:cb:b2:a0:eb:f5:3c:9d:00:7e:23:24:
11:27:88:41:2f:0c:e8:49:33:bf:05:84:bd:2b:1e:9d:14:cb:
87:77:f1:a1:d2:a7:3a:88:fa:18:8c:c9:28:64:84:b8:f7:54:
aa:11:8b:72:38:73:fb:03:39:86:d3:8f:b9:32:25:ba:f6:d2:
13:c4:54:04:aa:3a:c6:51:93:ac:7d:8c:31:4a:88:68:d0:87:
2a:2e:d4:8f:36:08:ee:3f:76:e0:04:73:94:ba:a0:6b:2c:c2:
dd:0e:b9:95:f8:6e:cf:53:b3:98:1a:db:95:e8:64:6c:4b:64:
65:19:93:00:cd:de:d1:69:40:b7:98:d0:51:f8:88:5b:bb:9e:
eb:88:8a:75:5a:2f:df:84:93:a1:2c:25:8f:5a:56:0a:0c:5b:
79:b1:03:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:28:48 2025 by rpki-client