Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa
File: a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa (raw, json)
Hash identifier: 6ev2asn4bDJnvmImCfrE1xw624NZVaGU04JiXBzhi7U=
Subject key identifier: 50:BB:F5:2E:A4:3D:84:9D:51:79:7C:FE:BE:1D:C0:ED:C3:20:43:9F
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FEE329EDA139DA78E0700
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 198148
IP address blocks: 65.72.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ee:32:9e:da:13:9d:a7:8e:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=220fd3bf-5c8d-418c-9dc1-2295ba189832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:9f:14:62:84:f4:ab:78:eb:76:bb:12:7f:
e3:c4:c6:0e:f5:ca:a0:fa:db:25:74:9d:25:fe:b7:
79:30:80:3a:11:e9:66:d0:46:c2:5a:51:ac:85:bb:
18:71:46:8f:02:d2:12:cb:d1:f1:f5:8e:a3:c1:27:
8f:c7:a2:ea:c6:47:55:19:03:93:75:b1:02:d6:8d:
82:3a:03:b9:78:0d:3a:f2:32:2b:54:53:b1:61:26:
11:08:52:f8:1c:36:d0:48:87:49:a7:3f:51:74:f7:
27:89:38:b6:1a:fd:0d:5b:aa:ca:5a:49:fd:71:b2:
14:83:9f:e5:95:3b:b6:27:f0:f0:a2:e2:23:95:30:
0d:68:70:bb:d0:e8:a6:4a:41:d4:78:61:06:5f:ec:
f8:80:3a:2b:b9:0a:21:29:a3:69:ea:a5:e8:bd:89:
f4:3b:10:14:44:82:6d:8f:b1:ee:c0:b7:6e:69:cf:
af:7e:8d:78:d9:4f:ec:71:6e:17:a9:92:3a:ad:53:
9e:54:10:61:6f:76:7c:dd:66:50:28:c0:0a:cc:c2:
2f:c7:36:6e:00:f5:aa:74:d7:6c:0b:30:49:67:22:
4a:cf:49:11:49:cd:fd:4d:9a:2e:4c:e2:9e:98:3e:
6e:f4:2e:84:58:ce:06:1a:11:d8:84:77:00:d6:36:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:F5:2E:A4:3D:84:9D:51:79:7C:FE:BE:1D:C0:ED:C3:20:43:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
65.72.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e2:c4:2f:95:76:23:64:ff:3b:79:99:6f:6b:7b:17:c3:4f:
d0:ec:f5:9f:09:b0:ad:ed:d5:92:d9:1b:2a:31:70:6f:fd:42:
e4:af:69:5b:ae:b5:ba:4a:88:a3:0e:be:88:f3:0c:83:4c:c7:
36:70:39:0f:8d:46:27:ac:ae:d3:ce:ee:66:05:c2:86:65:a5:
6a:89:cb:ed:db:5a:08:59:09:79:9e:95:7e:78:77:0a:3b:8c:
b6:6c:82:2d:42:ae:91:06:85:e2:18:82:ba:ff:13:77:40:cf:
1b:34:6f:91:55:d5:f3:e1:23:f7:0f:8e:45:a3:63:65:35:d5:
c7:09:fb:7a:6c:88:08:cd:cf:3e:23:e5:35:81:f5:6e:98:5a:
d7:d5:20:59:ef:1e:b4:17:5c:19:64:a6:8a:4c:35:70:fd:71:
06:66:78:50:fe:6f:ac:99:53:53:9a:70:a9:cc:f8:d2:b5:cb:
c7:6a:d0:1f:3d:35:9a:90:3f:64:59:5d:14:71:ea:81:0e:fa:
36:b2:e8:80:fb:54:9a:cf:0e:1e:73:7d:7c:e7:ad:eb:b5:2c:
5a:7a:18:87:37:41:98:c4:34:26:96:42:43:d1:88:47:a0:04:
b0:2e:13:46:da:a6:51:f4:b9:70:bd:08:8e:27:9f:4a:86:00:
c9:94:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:45 2025 by rpki-client