Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa
File: cbac2488-f4b2-3b9a-80e2-176f1395516e.roa (raw, json)
Hash identifier: +/9ORkXAx1wKTXH7/B+rXrt6cDqPcKJVxCE3T6lcc+0=
Subject key identifier: 99:A8:93:18:B7:3C:B9:E8:8E:C4:22:BD:5C:90:41:4F:6E:78:95:2D
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FEE4B87A65BBB099432C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 3491
IP address blocks: 65.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ee:4b:87:a6:5b:bb:09:94:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=c4cad045-9bc3-4f08-915d-d34e374804a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:6d:4f:6b:51:78:1f:85:61:4e:18:f0:51:
da:1b:d1:63:5b:32:81:26:5e:49:6d:1e:db:e1:01:
92:bc:6a:f5:69:97:00:24:a5:be:2f:0e:4e:84:04:
03:04:bd:b9:4f:3c:69:90:fa:ac:38:98:00:43:d9:
67:b5:9e:ca:b3:3f:cf:0e:19:dd:be:3f:e8:6d:af:
ef:5f:b8:a5:e9:46:6b:b2:03:cc:97:66:94:62:1b:
d7:7f:e4:00:6d:c6:98:af:5f:9d:2f:10:bf:8f:57:
fc:39:3d:00:dd:e1:9e:74:8c:a9:25:eb:37:ea:44:
2b:ce:0e:f4:18:f8:f0:2c:82:e7:0d:9b:69:b7:18:
b4:2b:76:3f:da:c5:0d:22:a7:d2:2c:51:05:89:44:
c3:f2:8f:39:94:b9:60:c4:5f:30:9f:36:68:ef:4f:
36:d9:db:ad:57:e8:a6:f1:98:c2:59:31:87:f4:9d:
ab:1f:43:70:c1:66:5d:4f:04:50:df:f8:4c:52:4f:
a5:50:14:56:1e:81:90:0a:2a:92:c0:fa:f8:0f:aa:
c6:db:aa:39:59:3b:60:85:a5:bf:23:99:93:d2:5b:
b6:49:37:6c:31:a2:87:d6:df:7c:d5:da:ab:5f:3f:
f8:98:db:93:85:65:88:c6:c2:34:a8:8e:5d:75:d9:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:93:18:B7:3C:B9:E8:8E:C4:22:BD:5C:90:41:4F:6E:78:95:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
65.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:66:44:1e:1b:7d:8f:30:00:d3:fc:bd:00:c2:f1:2e:ea:48:
9d:53:24:f3:56:94:52:ba:cb:1a:a5:9d:5f:50:55:cf:63:c5:
14:96:69:99:a4:b8:35:f5:92:7e:ab:ee:f4:16:49:67:26:e3:
b9:ce:5b:42:6f:3e:88:e6:0d:57:4d:bf:31:76:29:b4:3e:e3:
56:3e:fd:38:5a:bb:a5:1b:97:fc:f3:7f:ea:94:ea:6f:dd:b8:
99:ed:a7:e2:5b:35:bd:e7:00:11:aa:61:86:0c:4d:a0:85:d2:
f3:9d:eb:4b:72:ff:c3:40:c2:fb:50:b6:e3:c2:03:69:38:dd:
86:89:48:58:17:0a:6a:de:db:d7:13:ec:96:ee:0a:64:f0:00:
1c:0b:0f:ca:ab:99:2c:9e:59:ee:dc:34:c4:db:ee:59:32:fc:
95:76:64:2d:21:93:75:fe:38:cf:bf:d1:7c:8d:d5:8b:34:e2:
58:3e:a7:d0:a8:fd:66:29:07:dd:b4:1c:79:19:d5:f6:ac:91:
c5:48:5c:15:bf:67:fe:02:fd:d3:2e:d5:d6:07:82:89:72:f8:
74:38:3f:e2:1f:23:e7:f0:82:e2:3b:67:45:28:37:72:ed:12:
90:90:5f:f9:34:e4:8d:ef:66:b7:76:04:a0:a9:aa:86:72:e2:
b5:c3:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:56 2025 by rpki-client