Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa
File: 38911b59-4da5-3259-be8a-e5ae2c28a66b.roa (raw, json)
Hash identifier: 85NP1k6tVLBfePgPKYHpoDaC4XDXvQBIcHwAgJ8MQ7g=
Subject key identifier: 77:1E:0E:13:BF:E3:F3:05:7C:04:43:16:5D:60:BC:62:12:04:FE:5F
Certificate issuer: /CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf
Certificate serial: 010D0C9F43285848854B5236D5012D9967F9ED00
Authority key identifier: 13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 400510
IP address blocks: 206.202.0.0/18 maxlen: 24
2602:fe17::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:52:36:d5:01:2d:99:67:f9:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=feb22c62-5e99-43db-a6cb-b25006982f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:6d:5d:44:d0:02:52:2a:58:38:2c:6c:43:
c2:f6:99:9e:4c:4f:9f:f2:20:c5:a6:90:b6:d1:db:
ec:4e:0a:6f:75:c1:3f:d3:3b:25:e5:c0:1a:e6:5d:
4a:30:3c:90:7b:3e:98:7a:a3:17:4e:06:ec:53:59:
f0:63:56:30:00:e6:1b:e1:9d:a9:80:e7:3a:8b:04:
cf:fc:a3:7b:27:c3:e7:66:8e:87:23:f6:f8:56:cc:
5a:c3:e5:bb:15:de:e1:fe:40:4b:fa:74:b9:37:3b:
8c:5b:4b:29:cd:27:c1:7b:ae:f2:2b:3c:18:3d:f2:
6d:f7:be:7f:77:19:3f:60:d2:db:f7:c0:eb:95:1c:
d7:9f:12:54:6f:0f:45:51:28:2f:c4:8a:85:54:78:
0d:6f:b7:b2:70:c7:4c:49:2d:22:2b:a8:85:cc:5c:
08:f0:5c:3c:a4:e5:8f:4e:14:ef:99:35:8c:14:9c:
db:f8:45:d6:86:22:4a:22:c3:68:31:15:c8:bc:59:
7b:62:3c:63:48:af:b6:ac:00:27:02:9e:4b:ff:df:
05:09:6a:94:06:01:39:a2:c6:9b:db:9f:4e:71:6d:
52:f8:1a:1e:9f:39:a1:5b:b0:db:ef:89:c2:41:50:
96:99:c2:d9:93:ab:a7:11:f0:f2:d1:8c:8f:f1:b9:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1E:0E:13:BF:E3:F3:05:7C:04:43:16:5D:60:BC:62:12:04:FE:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl
X509v3 Authority Key Identifier:
keyid:13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer
sbgp-ipAddrBlock: critical
IPv4:
206.202.0.0/18
IPv6:
2602:fe17::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:1b:f4:c1:0c:4e:79:f5:b6:f8:94:c9:84:aa:04:f4:fb:f6:
d8:bd:ea:a9:73:d8:44:8f:95:cf:4c:a6:60:4c:b5:0a:45:14:
0c:a2:c9:7f:2d:54:6a:62:0a:91:b6:3e:f5:35:c8:2c:da:47:
73:c0:14:e8:90:14:4c:51:36:07:0a:43:93:0b:36:7e:f4:a2:
c6:7c:5a:de:94:0e:25:fe:66:8b:c0:49:2b:21:31:4d:8e:d1:
90:59:37:fb:c3:76:54:99:f3:7d:63:fe:4c:55:b6:fb:ae:28:
ef:7e:17:0e:1b:e8:bd:e0:07:c5:55:98:34:06:25:03:98:36:
52:2e:47:83:b4:53:b5:6f:12:82:c4:41:e5:5c:d1:95:a5:3d:
d7:cc:d2:be:8b:99:07:35:e6:f2:a1:ed:36:1b:d2:03:ca:dc:
e6:dc:84:14:e6:1d:43:73:31:ff:f9:23:27:ce:59:9e:83:67:
7f:bb:96:80:be:b4:25:bb:40:7c:26:aa:a7:d8:8a:8e:88:28:
31:de:e2:cf:3f:1d:c8:bd:01:bc:b8:be:5d:93:96:62:41:8d:
3f:1e:4b:d1:76:69:96:8d:ab:85:c8:c6:6e:86:fc:7f:8f:32:
b3:f9:59:2c:b4:fd:12:3c:5e:b9:55:8a:9f:4e:34:2e:b8:5a:
b8:d9:5e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:32:07 2025 by rpki-client