Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/633bf982-79ee-33c8-acf6-20e0d291a40b.roa
File: 633bf982-79ee-33c8-acf6-20e0d291a40b.roa (raw, json)
Hash identifier: eCuENQR8trdWK/DS6OrnIyZzx/dxK3+Ku5CKBBHbRe0=
Subject key identifier: 35:02:1F:6E:B3:CD:C6:C0:17:27:5B:3A:F3:22:85:08:09:1E:C5:DA
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584875F05144DAE560874705F518
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/633bf982-79ee-33c8-acf6-20e0d291a40b.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 6279
IP address blocks: 65.72.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:51:44:da:e5:60:87:47:05:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=7cb310c3-1589-4108-854d-c67458bf6498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:31:12:55:7f:76:45:50:72:e9:5a:0a:57:
ba:6a:dc:23:83:62:ab:cc:2e:6e:fe:4c:ab:98:5d:
97:e8:34:f4:ef:c3:73:d7:1f:40:bb:8a:86:d1:cc:
a0:a2:3b:9d:38:70:e1:73:16:f1:45:9f:3b:f3:49:
1a:6c:e2:cf:17:1f:a5:62:46:e7:e3:f3:61:60:37:
a3:3b:c2:7f:a9:54:95:10:f4:c9:55:74:de:57:37:
46:2a:e0:24:4e:00:a2:34:fa:8e:0b:28:02:f5:ae:
5b:09:af:2c:bf:1f:f6:1d:91:26:69:2c:91:a4:9a:
ff:e8:a9:76:58:ea:88:cc:87:bc:30:ab:87:d0:6b:
d5:ed:48:91:ab:1e:67:8a:23:d7:0c:a2:f5:fd:a0:
19:2d:89:18:b9:6a:01:81:1c:39:2a:fb:0c:93:90:
27:bc:81:e2:e1:51:94:ae:48:90:20:99:5f:3d:45:
48:c8:6e:68:af:05:aa:7e:e7:28:e5:95:df:e6:94:
63:63:52:72:20:04:b9:8b:32:fd:5a:2f:bb:a6:1f:
6c:30:5d:64:90:4b:aa:69:0e:29:4b:f0:27:99:b7:
04:4c:6e:f8:a2:a7:bb:e4:c9:18:5f:40:b4:ee:de:
bc:a2:c8:1d:10:76:2f:d9:99:09:3b:79:72:28:6d:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:02:1F:6E:B3:CD:C6:C0:17:27:5B:3A:F3:22:85:08:09:1E:C5:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/633bf982-79ee-33c8-acf6-20e0d291a40b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
65.72.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:85:ac:ab:f9:b1:88:9a:f2:bf:b3:ca:48:b0:dc:d3:a0:de:
e3:bc:1e:8f:5f:f6:0f:6b:2b:ab:91:47:ab:fc:17:aa:6c:c4:
c3:c3:1b:3d:24:13:46:31:9c:1e:01:aa:36:fa:ea:47:66:b5:
d2:24:8a:db:91:cf:b7:da:4d:4e:1a:11:bb:cf:2e:5e:aa:51:
8a:a9:fc:ce:7b:d9:dd:c2:ee:2a:7e:29:0e:da:72:6e:bd:9c:
a7:e9:aa:a8:bb:9a:5e:ea:14:86:58:77:d0:ed:f2:a9:3b:7d:
4b:65:23:3f:87:81:35:f1:18:58:e3:7f:a9:0b:b0:ab:e7:d9:
94:55:73:16:e0:02:b3:06:f2:cf:17:f4:8e:20:1a:56:82:69:
be:7c:1f:00:fe:54:8c:3a:12:30:9a:ca:46:27:94:57:1f:4c:
4e:15:39:05:79:f4:8c:1f:f5:51:fc:84:a2:d5:74:3f:e8:ff:
94:0c:54:d2:25:cb:c8:45:34:76:57:3a:f2:35:10:42:ce:87:
f8:fb:dc:1f:5c:55:b7:6f:70:a7:ab:b3:9e:49:5e:c9:a9:91:
cc:81:99:c7:76:95:bb:77:6a:d1:1a:32:55:2e:47:09:53:a0:
89:15:f7:ea:0a:fd:2a:63:c2:7c:63:da:68:54:78:9f:64:c0:
4f:7f:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:50:38 2025 by rpki-client