Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e34e7cc-a9d0-32ed-8f2e-f2bdc4295f52.roa
File: 4e34e7cc-a9d0-32ed-8f2e-f2bdc4295f52.roa (raw, json)
Hash identifier: kKZqiXmtFj7M5M6F4z30WB+9xzuvCBIcbNAvi4qpi1U=
Subject key identifier: 2A:A2:98:CA:1C:3D:B9:49:BD:B9:EE:E3:C3:16:2B:DA:89:3F:92:B2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B504DEF097DDDE65F7E500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e34e7cc-a9d0-32ed-8f2e-f2bdc4295f52.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 65.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:04:de:f0:97:dd:de:65:f7:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=bdeb139b-7a78-4cbc-bbdd-4bc0880bbc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:77:03:08:89:2f:76:29:59:59:05:71:64:
2e:a4:62:2a:38:d5:0a:b9:95:ed:51:aa:a8:c0:9b:
ff:0e:95:d8:7a:d5:45:6f:4b:10:d6:30:1d:e3:86:
8f:41:96:72:d9:dc:d9:0f:76:a0:ab:b3:5d:70:c9:
5d:92:11:3b:54:7c:98:80:d7:1d:eb:7b:2d:f5:db:
14:6b:c4:ea:f6:44:97:63:23:a8:9a:51:75:89:16:
37:6c:bd:d9:57:af:ab:8c:52:5f:e7:a8:76:fc:af:
69:28:6c:9c:24:83:6b:c7:f6:31:39:05:ac:b8:c6:
54:d0:fb:fa:e2:24:fe:1d:cd:20:10:2e:f4:93:b7:
d9:d1:2a:d7:57:90:d9:e2:12:d2:96:0b:11:30:80:
26:44:c0:9a:65:bc:5e:5d:8a:d1:56:4d:ee:e0:ff:
a5:3b:41:cb:84:ab:8d:35:a2:04:a4:00:af:44:47:
4f:25:25:2b:59:a7:73:f2:7e:5b:cc:b8:82:7e:1d:
af:19:87:de:6a:87:43:ce:b3:b9:51:c8:b7:d0:64:
d7:11:be:7a:ab:dd:18:b7:87:2d:ad:85:20:60:92:
be:b6:91:6c:3e:08:5c:eb:f3:9b:67:c6:6f:42:7a:
d0:8e:cb:6a:9f:8f:d5:63:95:ad:1f:c1:ca:a8:c5:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A2:98:CA:1C:3D:B9:49:BD:B9:EE:E3:C3:16:2B:DA:89:3F:92:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e34e7cc-a9d0-32ed-8f2e-f2bdc4295f52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
65.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:98:9d:08:34:3d:41:0f:18:c4:8f:1b:07:e7:c8:78:68:71:
44:cd:88:24:3f:17:54:78:3b:dd:67:e5:23:e6:48:9f:88:75:
ec:c1:13:ff:3c:5b:e2:7f:09:23:0e:b9:fc:7a:9e:3d:6e:6b:
cf:f5:41:6d:b5:e8:b0:d0:cc:bd:8e:ce:fc:fc:f8:ef:42:1c:
c9:ce:49:5a:e4:62:a6:da:23:e2:c3:d5:2a:76:35:e5:10:d3:
b7:b9:d8:3a:cb:db:f3:21:32:33:61:88:51:6c:a2:92:5b:49:
70:a9:a5:15:8a:9b:56:9f:6f:3e:be:cb:ad:66:87:c8:9c:c2:
40:6b:b5:87:5a:fc:5f:3b:ee:b3:ec:d4:88:2d:7d:53:c9:c3:
6c:aa:73:de:cd:72:82:bb:6b:00:f2:12:51:06:71:f1:5f:75:
ff:48:8a:8c:0a:1c:f3:b4:3a:61:e5:83:20:12:66:86:14:45:
2c:83:c0:af:04:6d:24:21:71:33:3d:34:11:3a:46:04:f2:09:
fa:97:d7:7b:40:e4:0b:2c:2b:48:6f:ce:c7:e6:cd:1a:91:dd:
f6:ff:4a:c6:91:9a:1f:ee:1a:74:46:dc:b6:62:46:b2:be:93:
69:80:2a:6c:0d:d5:23:fb:e7:83:c7:e6:93:d3:2b:18:1e:13:
5e:9e:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:32 2025 by rpki-client