Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5b1e2617-76be-390b-afa3-92c77d97d776.roa
File: 5b1e2617-76be-390b-afa3-92c77d97d776.roa (raw, json)
Hash identifier: OBE19DlyuiSEXcCZnaKtzCYhszFTq3CzO5ON6rFnAf4=
Subject key identifier: 3C:1B:84:37:67:78:8F:D4:62:77:4D:9E:32:CD:58:EE:CC:00:5F:8A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEF0C9E8A6E6741E46800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5b1e2617-76be-390b-afa3-92c77d97d776.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 54288
IP address blocks: 65.49.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ef:0c:9e:8a:6e:67:41:e4:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=85655ab3-9045-4ae6-8075-75b2eb4a47b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:df:58:36:81:86:6b:f7:f8:94:4f:4c:fc:
60:77:86:ee:d5:57:3d:cf:33:40:33:43:71:bd:0e:
0f:24:2d:f6:84:53:3b:c3:ed:ce:af:4d:16:80:2c:
03:db:99:11:d8:c5:01:99:eb:65:82:4b:ec:d8:44:
3d:03:a9:04:de:97:f3:db:ea:b9:5b:72:9f:5c:0c:
7d:37:6f:3b:77:8d:f4:b6:d1:ff:5c:c5:61:9d:20:
87:a5:6e:8f:45:17:73:f5:78:ea:f7:01:49:88:a9:
c8:3c:14:79:b5:9b:a3:31:3c:7c:1f:13:39:4d:86:
e8:71:cc:8f:bb:7f:21:3c:4d:69:6f:82:5f:b1:20:
70:24:4d:ed:15:b8:d8:66:d5:a4:d4:48:15:87:ea:
b3:29:de:4c:3e:7e:62:f8:b2:c8:1a:c7:7e:64:0f:
ce:26:80:f0:89:d5:3d:39:b4:23:87:a2:62:65:dc:
7e:af:0f:49:b3:07:b4:86:8f:26:46:63:2b:ef:a0:
c2:53:50:ed:6b:26:f9:50:2b:66:59:d5:cd:71:d9:
55:7c:4c:d3:dc:5a:5d:63:71:02:34:53:e8:b9:b1:
61:ba:b3:18:c5:8a:a7:ee:a1:25:b0:af:00:2a:c6:
e8:d0:e2:81:22:43:22:73:98:47:9a:1c:c2:07:1b:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1B:84:37:67:78:8F:D4:62:77:4D:9E:32:CD:58:EE:CC:00:5F:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5b1e2617-76be-390b-afa3-92c77d97d776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:4e:12:8e:ca:a1:55:db:72:53:60:91:d0:90:e8:a5:29:b5:
4f:16:a9:14:a2:a0:ec:ba:2d:6e:cc:84:4b:5f:8e:99:76:f1:
b3:b5:f3:c4:b6:9b:15:e1:37:f4:8c:47:b4:a9:fb:6c:bf:1e:
2e:c9:24:67:a3:93:7c:38:5e:05:5d:46:3e:fa:e4:7c:f3:df:
db:92:3c:f3:65:aa:24:1d:82:b0:c0:d9:5a:99:c0:f1:53:6f:
1f:7d:39:23:da:eb:f4:e2:e3:6e:3b:89:95:67:2a:d0:10:67:
6d:9b:37:f8:da:0f:d5:19:03:26:7c:2c:68:da:a5:c1:b7:16:
7e:3e:95:15:79:d9:3f:50:e7:f0:71:b8:af:30:61:c9:2f:34:
23:16:a8:82:31:b3:f4:bd:37:d0:8b:d2:4d:82:de:70:70:9c:
cb:bc:f7:61:0a:3c:3b:15:03:d2:ea:ca:9e:d9:e3:c8:61:df:
3f:52:e1:de:8b:99:cd:ad:bc:f8:b2:8f:cf:17:0d:d8:ff:08:
5f:e1:8f:4c:a4:c1:b7:4c:6a:1f:c6:26:d6:9d:35:96:b3:ba:
f7:94:60:5f:4e:98:e5:54:90:0c:03:f7:a4:8d:e2:92:f4:f3:
e0:15:7c:f1:09:52:e7:2a:0a:68:88:3d:f5:a9:a9:54:4c:69:
ca:9f:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:08 2025 by rpki-client