Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc328b62-0fef-333a-8b38-eaee2f4b4e00.roa
File: fc328b62-0fef-333a-8b38-eaee2f4b4e00.roa (raw, json)
Hash identifier: V9HEsJsWNOKfDOZ7Ia3Umw6nJWVpsFSVH2hSe6IAHsI=
Subject key identifier: 67:D3:41:DC:2B:92:9C:3B:C6:CC:0D:8F:BC:F3:07:44:5C:8F:84:3E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00B57A151D2F46F538D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc328b62-0fef-333a-8b38-eaee2f4b4e00.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36103
IP address blocks: 65.49.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:0b:57:a1:51:d2:f4:6f:53:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=6bdafbe9-92d4-4c4e-9651-05381253113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:1b:34:39:a7:95:4c:4e:ce:62:35:a0:28:
8f:22:78:5c:1d:a1:59:3c:e8:93:c1:15:76:c4:8f:
88:f7:42:41:14:53:82:a6:2a:c1:46:31:0f:c1:db:
a8:12:ec:e2:e2:32:07:41:0d:e3:14:06:58:6e:2d:
c8:14:6a:57:fe:ea:da:0f:cb:fc:1b:49:f9:45:33:
19:be:2c:29:e5:38:73:ea:45:fb:3d:8d:cd:9e:9e:
04:b3:21:93:69:e7:6f:47:62:03:01:e3:ad:91:8a:
bb:ef:05:17:af:c9:21:d8:6f:51:77:f4:35:e2:ec:
ec:ff:3e:81:d8:58:c3:57:9c:f0:39:5b:37:d9:04:
ba:40:e8:22:ce:d5:ff:67:ba:a3:64:7b:6d:06:57:
26:c3:33:40:b3:cf:82:54:4c:e2:23:0e:3c:73:6f:
fb:ed:79:e2:4d:8b:f3:10:c5:f1:ec:4c:21:6a:6b:
fe:32:f1:7d:10:be:08:9d:5c:5f:dd:35:d1:ff:7d:
e2:76:ca:eb:f0:8d:28:62:e8:a0:38:cf:ec:f8:ff:
c7:2c:8d:e1:81:a1:be:c9:b5:45:fc:f0:bd:e7:24:
ab:df:a4:ca:80:74:07:d7:f3:38:86:22:a5:30:2c:
0d:1c:8d:48:e8:11:a2:aa:50:88:71:67:df:08:65:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D3:41:DC:2B:92:9C:3B:C6:CC:0D:8F:BC:F3:07:44:5C:8F:84:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc328b62-0fef-333a-8b38-eaee2f4b4e00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:8c:9a:f1:d3:a8:34:d9:04:db:c2:7d:6c:31:68:20:42:1c:
ea:3e:8e:02:4c:32:01:ff:b4:4a:76:3d:2f:33:c0:38:34:4a:
13:9f:9f:0b:21:73:c9:8d:f6:79:85:6d:a6:5d:73:32:97:02:
ad:2c:b5:4f:0a:a7:a7:c7:5c:ac:e7:31:40:19:e6:62:45:7e:
62:3a:c5:00:ff:e8:2c:7a:37:52:d7:10:50:1b:fb:68:8f:0c:
d6:a4:ba:57:71:00:13:df:3f:62:3f:05:d6:47:5e:fa:cd:7a:
37:ba:f2:41:20:d5:b3:d3:e6:7e:57:9b:19:df:c3:28:fd:42:
78:f0:4f:cc:65:bc:c4:f8:20:7f:1f:73:ef:d7:d1:48:1d:cf:
74:1f:91:60:ef:a9:44:c4:4b:e4:8a:4a:d2:46:42:db:ba:7a:
4f:9a:50:2b:e6:e5:35:2b:6f:94:b7:70:a9:68:de:1b:2b:e4:
41:32:04:03:b8:da:72:a0:77:51:74:7d:ab:29:cd:73:d6:64:
49:5f:f6:e6:53:cf:00:91:38:65:e7:aa:ce:01:a4:c9:7f:7b:
88:f9:f7:49:dc:27:51:cd:0b:2a:dd:6b:50:a9:4d:64:41:d0:
ba:13:13:96:64:d3:37:4a:5d:08:5e:b3:15:27:3e:c6:fd:67:
40:be:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:24 2025 by rpki-client