Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10d03987-92c4-3af8-8c54-4a8f669f8d9d.roa
File: 10d03987-92c4-3af8-8c54-4a8f669f8d9d.roa (raw, json)
Hash identifier: uaPfixX+nMthw3m9xfRL47bzDk7O28qFgm1BeRH3RaY=
Subject key identifier: 27:2F:D6:87:5B:3E:AF:88:87:CE:F1:B8:BC:DB:DF:86:A6:DA:90:D5
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14FE7BCE5C7DFDA706F40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10d03987-92c4-3af8-8c54-4a8f669f8d9d.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 65.185.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4f:e7:bc:e5:c7:df:da:70:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c649f3bc-50eb-4043-a967-09a7a293b9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:c2:0a:c0:a7:ff:0c:64:92:25:6a:69:4f:
47:19:23:1e:b5:1a:09:11:82:e4:22:08:16:65:1b:
07:b1:e1:6d:5e:3f:d8:8c:c6:41:e8:b4:a5:54:b4:
49:84:28:1c:ca:94:e6:e2:21:6f:f7:47:d6:0e:84:
a8:13:5a:9f:34:af:60:9a:eb:c2:c1:ce:c3:d3:b5:
2f:bd:f8:6f:da:92:d7:5c:2f:65:a8:00:03:12:99:
3c:75:81:c5:bb:99:3b:1a:c5:45:1f:63:be:00:aa:
14:f8:61:5d:41:18:89:d8:11:d8:a3:20:c9:18:31:
ab:b5:89:2f:8f:eb:35:12:1c:ad:1c:28:ba:40:f5:
4d:18:05:30:67:88:e7:4e:43:de:ad:14:61:b1:89:
93:2a:a5:7c:ec:32:3d:89:2a:d0:2a:69:c2:96:64:
dd:c3:05:19:9e:44:dc:e9:c1:62:88:cf:8b:d9:62:
0a:d3:3d:97:8f:d8:cd:53:6a:78:cd:c0:24:0e:8a:
48:66:ee:fa:f6:2a:0d:bc:2e:89:aa:1e:8d:be:37:
ca:fe:89:4c:f8:a9:47:ec:ec:72:53:6e:21:4c:72:
a6:5f:dc:85:b5:e2:21:ca:01:c4:00:d1:69:68:cf:
2e:5a:6a:85:8e:21:ed:3c:15:ed:b4:2f:ce:89:0e:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:D6:87:5B:3E:AF:88:87:CE:F1:B8:BC:DB:DF:86:A6:DA:90:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10d03987-92c4-3af8-8c54-4a8f669f8d9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
65.185.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:91:a6:f2:95:d0:4d:24:e0:25:df:4c:07:2a:cf:2e:e9:68:
cb:73:e0:7f:d5:58:76:8e:85:21:6b:4f:ae:c7:c4:10:1d:b4:
e6:cc:45:ce:aa:8c:00:e8:dd:80:fc:99:f9:c6:b1:01:51:1e:
0b:a1:23:e8:1b:e0:c3:da:ff:d2:23:c0:f2:04:6e:a9:b5:9f:
23:33:16:b3:38:af:cd:ed:e1:4d:a2:59:3f:a7:c8:b0:a7:c3:
10:e1:c2:63:fc:f9:02:86:d6:ec:80:48:1c:95:a3:b0:ca:ee:
5e:43:98:54:7f:27:8a:60:63:7d:c4:8f:3c:e2:db:2c:4d:c9:
70:26:b7:38:0a:62:7d:a5:d6:ab:a2:c8:3e:11:5e:e4:32:a6:
65:4c:b0:d9:7e:f0:9c:3f:5f:ce:48:ce:dc:b6:a4:33:54:39:
42:3e:9a:cf:e2:23:11:25:05:68:43:bb:73:33:9d:e2:7d:a3:
cf:9d:e3:2d:70:9e:fd:87:6b:4b:f1:05:3f:5f:0a:1b:53:ca:
fc:44:55:1c:4f:a3:15:fe:b5:0b:c0:b6:29:ac:0e:78:55:98:
4c:e3:dd:4c:d3:3a:53:4c:0c:79:39:e5:3d:9d:70:3d:13:84:
43:67:71:35:cf:de:e4:0d:90:2c:7d:ef:6a:41:cf:35:4e:67:
93:5b:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:30 2025 by rpki-client