Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
File: b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa (raw, json)
Hash identifier: pV9xxYQxepfH5ZOqEDKiUIzM8EYcUWBSoUsT8CDUDMM=
Subject key identifier: 48:98:6D:61:E3:8B:84:0B:DA:74:B7:B3:75:EA:23:BA:1E:D4:90:55
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01FF23B52050F965DFDE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 1492
IP address blocks: 216.66.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1f:f2:3b:52:05:0f:96:5d:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=4a8c0790-8c3e-4eb9-bd44-da3836bc8bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:01:70:bf:74:a9:16:37:fe:92:22:07:cc:
27:aa:f3:55:09:89:f1:72:0b:28:ac:b4:94:f5:1a:
c7:e2:ed:bb:8b:59:a6:03:0b:55:0a:44:b4:4a:ad:
a7:0d:b9:93:38:4d:7d:a3:29:53:5f:b0:12:e4:c4:
6f:d6:4c:b2:44:fb:25:c4:d1:d5:91:2d:85:86:8d:
db:fc:36:45:70:00:42:d8:cf:0f:1c:19:82:d6:18:
ee:01:e3:9d:cc:d1:1f:c6:3a:75:b5:5b:2f:46:71:
8d:cd:d0:62:9a:9f:68:65:7b:01:83:3a:17:e0:88:
ac:e0:57:69:07:3d:a8:a0:d9:de:73:4a:b1:76:5f:
fa:14:72:a1:73:b4:ee:c8:ca:12:bf:1f:6b:41:22:
93:24:86:e7:da:19:3b:a5:d3:0e:4a:21:6e:e1:fc:
a6:84:29:52:88:85:32:6e:56:02:7c:cc:83:d4:12:
88:22:6c:6c:87:c4:60:0e:15:1a:1b:21:00:58:3b:
de:be:8e:1b:31:56:32:61:6a:f0:e5:04:f3:ff:cd:
51:27:1d:c4:fd:a6:76:29:d3:34:0d:52:78:17:d7:
80:65:a9:f2:d7:f2:b4:79:55:87:a2:74:ef:fd:c7:
c4:c0:c2:bc:da:80:d5:ff:8c:43:bc:1e:16:4f:eb:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:98:6D:61:E3:8B:84:0B:DA:74:B7:B3:75:EA:23:BA:1E:D4:90:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:f4:45:84:85:2a:48:e0:5b:b3:50:bb:de:51:d2:16:ee:b5:
bd:14:59:92:18:4c:29:b7:62:7a:2a:e7:af:43:e9:06:29:3d:
a6:3e:59:c2:e3:1d:ef:9a:9c:51:1b:cb:08:1e:99:7b:03:12:
80:9a:e4:6d:9b:d8:80:05:11:b4:14:16:e7:67:5b:3e:68:30:
ab:4f:92:aa:e4:54:21:cf:4a:37:c6:00:f3:74:27:69:7b:fa:
ee:f6:a2:e0:27:41:22:34:52:26:3b:d7:77:47:89:94:bd:19:
5a:01:9b:43:45:5e:c0:55:ff:86:93:7d:98:85:5e:35:38:2e:
1b:05:fd:8b:d0:c1:03:14:f8:0e:5c:a0:cb:2c:e2:e9:d9:bb:
33:83:ba:a4:87:68:09:25:75:28:fc:15:ac:9a:8d:a8:43:4e:
3e:80:91:d2:aa:93:bd:5f:83:96:58:d3:96:83:22:96:1d:09:
94:28:e2:43:b1:14:01:41:a5:f1:f4:0a:24:80:f7:a2:a4:18:
3d:60:90:f6:14:92:7d:35:fb:04:2a:79:ad:9c:cb:c8:e7:9b:
f8:d9:a3:e8:f0:fc:df:54:42:e5:ab:77:f2:24:07:5b:94:b7:
06:b8:a9:ec:22:b8:cb:31:ab:2c:4c:db:c4:9e:8a:c5:83:5e:
03:78:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:31:50 2025 by rpki-client