Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/dd2015da-82a0-34f3-ad8f-2dcf2b012b47.roa
File: dd2015da-82a0-34f3-ad8f-2dcf2b012b47.roa (raw, json)
Hash identifier: wav4gjvl9eIZ+5JJIaKjkXnuvgHyyrni/WC51Yh9c6c=
Subject key identifier: D7:A6:AF:3D:53:AF:2F:79:A2:FF:A1:C4:00:2D:9B:2C:46:95:16:B4
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F43285848FD56AB22920C82C744508100
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/dd2015da-82a0-34f3-ad8f-2dcf2b012b47.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 46080
IP address blocks: 65.51.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ab:22:92:0c:82:c7:44:50:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=1da31cf6-96dc-4450-abee-118c96ded34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:c0:c4:d2:95:84:50:12:57:49:31:b3:e3:
10:b9:30:db:b5:09:97:28:1a:96:2f:90:ff:87:19:
ec:59:ff:d5:11:0f:bf:66:77:04:c0:48:2d:67:3b:
8f:ca:8e:9c:8d:45:9b:d9:1e:2d:20:b6:6b:da:eb:
35:b6:70:fa:19:fa:ef:e9:a8:db:c5:7a:68:42:f9:
2c:ab:42:8e:54:fe:da:bc:40:32:f3:88:16:15:49:
37:e7:16:fc:c0:0e:7d:bf:e1:26:d2:b8:77:59:ba:
94:6a:dc:42:40:48:af:ac:04:ac:a0:18:b9:e9:a8:
e6:83:40:ee:bf:44:50:4e:af:af:37:14:14:1f:54:
99:47:85:27:93:c2:d1:52:52:dd:ae:1f:9c:b0:b6:
55:6f:d6:50:80:e7:26:ad:df:17:f9:79:28:df:c0:
f6:1f:b6:0d:c4:3d:db:8d:c0:19:d0:fd:8e:4e:eb:
2c:67:d9:70:36:aa:24:a1:30:77:8f:18:52:39:c4:
70:56:73:e8:70:db:32:5f:29:9f:54:f7:4d:83:70:
43:3b:85:d3:d3:45:4b:b7:0e:d1:78:d9:d3:38:c0:
e1:38:ad:73:97:d2:b4:94:08:1a:7b:25:f6:f2:55:
95:6f:9d:60:ef:07:1c:2d:64:9a:f0:96:3c:cf:e1:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:AF:3D:53:AF:2F:79:A2:FF:A1:C4:00:2D:9B:2C:46:95:16:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/dd2015da-82a0-34f3-ad8f-2dcf2b012b47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
65.51.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ee:f7:cf:d5:f5:e3:63:02:3d:c6:5d:18:51:38:a4:95:58:
bd:70:d6:d5:00:a4:20:aa:6c:ea:e9:11:ca:f2:4e:55:e0:36:
6b:1d:14:df:b0:9e:1b:1c:80:05:88:d7:84:84:0d:0f:cc:8b:
52:a1:a9:60:92:74:d8:3b:d1:e8:2d:ec:56:a7:e2:3e:98:c7:
79:db:7a:c6:32:70:5f:62:a7:8d:98:c9:29:ea:62:7f:a6:40:
51:9d:1f:39:0e:e4:4f:b6:99:6b:79:00:6b:e2:99:81:33:f9:
12:a8:6b:13:dd:15:f1:3b:28:70:b9:d9:82:30:53:12:32:e3:
d7:f8:bb:a1:a5:6a:be:64:5e:8f:2c:c4:26:44:e4:df:fe:53:
20:90:54:3e:06:af:86:d0:fe:82:6b:57:4d:26:45:1d:6d:9b:
3f:12:1a:a3:5d:ca:bc:ca:a4:79:c5:ab:fe:06:9f:63:36:d0:
83:42:f5:36:9f:a9:88:70:b3:81:55:a4:32:a4:e8:4a:94:35:
af:d4:9e:14:3e:c7:1f:4d:62:d2:6b:65:ac:93:33:93:87:45:
0f:81:20:fb:f7:7e:b7:ff:f4:a4:af:ea:72:8b:ad:e1:ed:e7:
fe:87:8f:3d:d9:87:cd:49:da:6e:66:63:c0:4d:4e:3e:e1:d8:
79:6a:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:16 2025 by rpki-client