Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa
File: 9bb59be7-0b44-33d9-a9d6-b806d4424238.roa (raw, json)
Hash identifier: Mo7wBGq63UvWLWGp2nhghy4Q/ktXJxcqTLpb+RYl+Sg=
Subject key identifier: E1:30:82:6D:B9:B0:0E:F3:81:C5:5C:BF:2E:AF:B4:0E:66:E1:AA:B8
Certificate issuer: /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Certificate serial: 010D0C9F4328584819CFD237E4FDC5E1D18FE280
Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 65.20.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d2:37:e4:fd:c5:e1:d1:8f:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=fd7d8a7d-73f7-40f4-aaa7-2fda61061ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:11:31:d0:66:2c:bd:c3:38:bc:6b:4c:b5:
c6:78:14:74:ab:57:ad:39:1a:95:ac:be:77:eb:fe:
56:11:87:2f:c9:1c:6a:fa:19:3d:9f:65:15:0e:71:
be:3e:cb:c5:44:45:95:4a:27:48:19:d4:f0:08:de:
d2:c3:71:90:96:94:5c:e8:b4:7e:95:31:7d:bb:4f:
c1:07:38:da:e4:c8:8a:b7:f4:d7:40:fb:5e:c2:c4:
fa:9d:8f:69:55:bd:07:3c:74:08:3b:a4:e0:44:64:
6a:89:25:5d:70:83:ae:b7:a7:3a:bb:5f:b1:5b:e7:
05:34:35:67:93:45:3e:53:50:63:08:bd:fd:d1:63:
67:23:74:a4:dc:13:b3:be:5c:7b:e0:b9:25:d4:cf:
b6:b7:dd:d4:b6:30:10:bf:1d:84:29:0a:b3:13:2c:
c3:5b:c6:48:de:e7:05:e5:de:bb:6d:97:47:37:7a:
a9:b2:43:ac:be:f3:e2:37:6d:bd:0e:ae:c3:f1:cc:
1e:3b:33:e9:cb:05:4a:ec:84:6b:de:51:ce:85:35:
4d:b2:b5:66:5b:6f:b3:2a:68:a9:6c:68:1c:c9:30:
27:15:35:37:7a:d2:70:20:55:83:a4:fe:02:58:fe:
69:a5:05:b3:69:57:72:86:68:b9:9a:46:58:0b:72:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:82:6D:B9:B0:0E:F3:81:C5:5C:BF:2E:AF:B4:0E:66:E1:AA:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl
X509v3 Authority Key Identifier:
keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
sbgp-ipAddrBlock: critical
IPv4:
65.20.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:35:15:d1:1f:2a:fd:a4:9e:f7:9b:65:8d:15:15:05:db:f0:
01:be:6a:04:0a:7b:c0:c9:61:f0:d7:61:ad:71:e2:f3:28:a4:
bd:c3:bb:ce:f5:cc:d6:27:91:3a:45:30:18:5a:9f:20:42:06:
b4:d5:80:33:d0:1d:7e:63:9d:b5:72:19:62:c5:bd:0c:eb:b2:
c1:99:54:34:e8:45:7c:2a:61:9d:c9:38:5a:ea:4f:e1:cb:a2:
cb:c8:68:0c:ae:52:ce:82:26:2b:c9:a5:98:2a:a9:47:76:39:
8d:30:4a:41:b1:db:64:54:c4:73:8a:ed:a0:a9:1d:40:93:c3:
28:42:ac:43:f8:84:9a:19:27:75:77:b0:31:df:b9:3d:bb:af:
6e:3b:13:c1:00:32:e3:35:8f:08:73:32:96:99:85:db:bd:18:
8f:51:fa:01:fb:18:d2:5d:9e:94:0f:17:c4:bb:01:f9:b5:d3:
58:55:ed:6d:7c:2f:3c:c8:9f:de:23:82:ab:8c:89:41:ea:fe:
b3:5a:ea:86:20:a8:ea:7f:5e:b4:08:f7:28:a6:f7:31:54:5c:
7c:a7:23:fa:25:e0:84:92:65:4b:af:65:98:d0:61:82:f1:f6:
4f:29:a5:fd:b6:d0:2d:65:3b:f9:4f:48:86:9b:31:eb:d3:07:
8e:30:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:36 2025 by rpki-client