Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa
File: df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa (raw, json)
Hash identifier: 1NCURNOUgBLK1UuWOr7sPwCGmVqdPCQL1a+lEvFdpHw=
Subject key identifier: 9D:A5:4F:9C:D0:F0:F3:CD:10:98:A7:BD:36:B8:A0:BC:FA:5D:EB:61
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D011C3D1461C86D06A4800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 22168
IP address blocks: 65.49.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:11:c3:d1:46:1c:86:d0:6a:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=6e07a3ad-114a-4312-a07b-97feea109c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:93:ae:7f:d6:a8:50:6f:03:bf:ad:55:e3:7c:
aa:78:3e:11:e3:b6:2c:e6:67:b5:d6:83:4d:80:3a:
d5:2f:4c:21:09:17:69:5c:02:d5:91:ab:34:90:51:
e2:cb:1d:3e:bd:7c:cf:6e:27:d6:af:ae:db:57:10:
23:57:49:3b:26:71:25:8e:55:f0:49:84:6b:22:0f:
37:54:b1:5f:bd:d4:74:4c:31:0d:b0:ae:28:f9:ee:
3c:80:0d:2e:68:1b:81:24:8d:02:9f:9f:a7:f6:c8:
a3:67:2f:87:91:04:2d:28:4b:33:88:d6:54:ec:4e:
84:f4:f8:49:f4:4d:0a:50:e0:f6:25:2d:d6:b3:e8:
c4:19:61:62:97:a8:8f:a6:c3:e1:70:ff:b1:e6:d0:
83:7a:ff:cf:3c:0f:c9:8b:46:e2:55:b7:6b:30:4b:
fe:ae:6f:68:4e:fd:46:94:4b:19:84:8f:5c:f2:83:
05:fc:28:bf:0f:f5:8e:cc:6f:e2:50:b0:9a:f0:18:
b1:51:8a:d1:0f:20:49:bf:33:20:10:6e:7b:9a:b0:
cf:5f:00:67:44:d8:ba:d5:4c:c6:6d:5c:15:be:89:
1f:24:44:b1:6b:ed:a1:e2:62:72:4b:67:88:60:e7:
a4:a6:21:10:c6:7e:a6:54:41:e8:67:f9:b1:51:f8:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A5:4F:9C:D0:F0:F3:CD:10:98:A7:BD:36:B8:A0:BC:FA:5D:EB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:97:79:f3:8b:e0:4a:98:f2:79:21:aa:02:f7:a2:77:97:21:
bf:96:d6:fb:9a:0b:09:1f:b6:06:2a:2f:8b:d9:3c:53:e6:52:
bf:24:62:48:b6:97:24:a0:68:b1:f9:17:4c:24:f3:8d:14:f1:
14:4f:61:33:e7:99:a8:5b:98:d2:9e:5f:fe:d1:9f:6a:b3:1c:
09:c4:0a:57:c3:f8:8e:97:f5:76:4e:25:c0:80:e5:bf:64:e7:
34:c1:23:5a:e3:d9:c3:60:52:ca:ea:cf:7c:29:de:53:00:33:
98:0e:0f:84:23:04:13:6b:52:33:9e:54:a8:9e:82:c1:cd:d4:
05:ff:52:0d:5b:8a:52:e0:9c:37:e5:a1:18:fc:61:30:9b:e8:
da:6b:65:9e:35:6c:cc:88:68:05:d4:f1:72:0b:15:93:f8:c5:
23:b4:45:5e:ff:1d:bc:20:ae:89:14:e2:21:a5:1a:b3:ed:d7:
f8:37:f3:07:a2:05:7a:77:9d:91:ff:0b:a0:fd:ff:e5:41:f8:
c1:a5:d9:32:57:ac:b2:2b:2f:e1:4d:3f:3e:95:e4:f9:3d:85:
86:de:77:58:a7:0f:7a:3d:f9:70:73:eb:9b:58:6c:3a:4b:a5:
3b:31:16:47:43:3c:1d:46:49:5a:06:d6:07:a7:f6:2f:0a:92:
72:5d:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:22 2025 by rpki-client