Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb09a7bf-1631-36f0-a56a-acafc8ae1d1d.roa
File: cb09a7bf-1631-36f0-a56a-acafc8ae1d1d.roa (raw, json)
Hash identifier: tGrih6ePabpkfGQP6kiSzvjJgc8rcqWbM6qfG91Mp5k=
Subject key identifier: 56:08:FD:31:C6:A3:53:9B:E8:44:60:81:9E:22:ED:2B:4B:27:9F:04
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00BA1E1EAB07A005A1B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb09a7bf-1631-36f0-a56a-acafc8ae1d1d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36103
IP address blocks: 65.49.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:0b:a1:e1:ea:b0:7a:00:5a:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=8c6f7d80-9324-4eb4-a54f-ec7a56ca926d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:83:2c:47:79:ec:3d:46:bc:b6:df:a6:9c:
3b:4e:c6:7f:40:94:5c:d9:4d:c0:91:07:ef:b8:c1:
21:38:11:b9:5c:f1:f4:7d:e3:9b:19:dc:2c:2e:1c:
87:a5:61:86:b9:bd:f1:6f:af:9a:31:7f:c9:f4:0f:
7e:2f:e7:23:26:63:4c:b4:93:db:a7:6e:d8:89:db:
9f:a1:ca:db:cd:3a:02:29:e7:5d:cf:3d:67:ac:24:
3e:95:8a:08:1b:b9:fc:93:88:2d:33:93:81:9a:82:
4f:67:7f:2d:5a:d5:19:9e:e2:d5:4a:7c:9d:dc:d0:
92:23:46:51:0d:76:e6:bd:45:85:fc:7f:0b:ee:d5:
bb:06:51:6e:5c:36:e2:1a:f7:39:c8:1a:ca:8e:f8:
ea:7c:ef:d8:48:65:55:94:8f:c7:44:cd:f4:b2:10:
8e:0d:ff:8f:f6:63:bc:e6:ab:f9:20:bf:d0:38:e6:
3b:1a:29:11:a3:f9:fc:4a:8d:04:25:11:01:45:90:
76:29:99:60:a6:f6:0f:92:a9:39:93:81:77:0d:59:
73:ea:50:70:a2:6b:b2:66:ad:ee:78:ec:3b:b3:b1:
75:12:90:91:2f:fc:fc:b0:80:f8:41:f9:3d:23:18:
9c:36:41:ea:73:de:db:53:3d:e3:39:02:26:e5:35:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:08:FD:31:C6:A3:53:9B:E8:44:60:81:9E:22:ED:2B:4B:27:9F:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb09a7bf-1631-36f0-a56a-acafc8ae1d1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:83:e4:ec:b7:f2:14:0d:a4:7d:90:92:e7:95:27:36:60:3d:
ab:0b:e7:f0:7b:9f:67:ba:4d:f0:9f:c8:0c:97:6c:24:49:2d:
6b:c9:a9:7d:b0:f9:3c:9f:b7:96:f7:4e:7a:7a:b2:81:49:3d:
bb:3c:11:66:de:45:7e:47:43:71:06:01:a0:f7:9d:06:3a:4a:
0e:0c:e9:40:cc:d1:cb:12:8d:7b:fc:4e:53:30:4c:90:b9:9e:
a5:23:3c:fa:6d:74:cd:15:63:40:0f:84:34:44:cf:0b:cb:2d:
db:7f:f5:75:00:ef:1c:f7:98:bb:c2:a0:49:e1:78:e7:33:4b:
87:37:2e:4c:49:fa:fd:bc:69:8c:68:6a:13:e2:b4:94:5e:8f:
39:dc:0e:c3:23:5f:0b:ce:42:8d:49:d7:05:4c:e7:1c:28:e7:
a1:dd:a7:09:39:1b:6d:97:c5:39:0d:3a:eb:5a:d6:2f:31:eb:
bb:59:d4:d1:fd:b5:10:b7:1f:e3:07:8b:8c:f2:47:d6:6b:d8:
05:fe:55:09:21:e7:0f:3e:81:b4:cd:18:28:76:76:56:86:d9:
be:a1:5f:19:65:41:a4:5a:68:82:e3:9b:39:cc:d2:68:4e:7f:
fe:67:1b:07:11:50:c1:ee:bf:d2:78:54:59:1c:a8:7e:04:0e:
94:75:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:45 2025 by rpki-client