Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa
File: 14a69187-3551-3a4a-8a20-6c538d19949d.roa (raw, json)
Hash identifier: b9lLclwVuqrQrMllBRsXBMzWsCM9d1jc4lP4J5QpBsE=
Subject key identifier: 15:BE:43:A6:98:7A:C0:D4:92:9D:D9:38:22:87:EC:AB:2A:FF:0C:D3
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F43285848E16BD37F30718E284511CFC0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 211439
IP address blocks: 65.110.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d3:7f:30:71:8e:28:45:11:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=91ddde4f-6485-469a-ba28-3c787c86583c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:59:8b:f5:86:d7:2b:f6:ce:f1:1e:96:6d:
0b:f5:69:86:bc:7a:d7:02:38:d4:e4:fa:20:91:93:
5e:fb:da:28:87:c4:a2:f6:0b:27:7a:e6:d0:22:b3:
f9:c4:93:d7:98:47:c7:fb:3a:a2:b2:de:db:2e:df:
20:57:7e:71:f4:71:a6:7d:4c:55:ff:0b:63:79:f7:
af:6d:41:00:ca:59:2f:4e:34:14:0e:81:1b:58:d3:
72:db:9b:84:57:5f:0e:ce:14:28:0b:c5:64:18:7a:
d6:4d:b2:d9:e1:51:f1:cd:c4:91:6e:1b:ab:b1:7b:
29:0d:7a:af:e4:01:ba:8f:92:e1:ce:a2:f4:a2:44:
76:3b:6f:03:5d:b9:3e:ac:72:f5:7a:d8:9a:5c:e4:
37:51:49:7f:66:9b:3b:b5:a0:08:70:c7:48:6d:51:
57:9d:12:d6:9f:bc:fc:9e:90:f0:22:0c:8d:98:17:
a2:15:fc:5b:ac:aa:76:c1:bd:71:9a:93:84:f9:fe:
d2:85:de:31:06:54:dc:7d:f4:62:8f:e8:cb:bb:34:
31:3c:3a:00:9b:a3:52:59:14:ba:6f:4b:92:bd:88:
27:ea:08:92:b3:2b:8b:d8:e5:5d:b7:ff:82:8f:69:
90:2d:53:b3:cd:32:19:60:6d:73:f7:d2:9f:40:fe:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BE:43:A6:98:7A:C0:D4:92:9D:D9:38:22:87:EC:AB:2A:FF:0C:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
65.110.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:09:f7:f0:c2:86:d5:bb:4d:37:cf:51:dc:b9:3a:ac:9a:9c:
ee:88:4c:3a:b3:89:08:54:0d:b6:52:d7:98:9a:3f:5a:17:9c:
c8:3d:c7:47:90:31:02:ba:96:9d:75:0b:f0:0b:e2:93:f2:23:
3f:df:5a:72:e8:32:c6:50:20:f0:94:89:42:b2:3c:59:a9:85:
fb:31:ce:10:8e:de:b2:9f:ac:48:90:ff:da:25:c5:e6:ba:90:
4c:81:8c:2d:ab:9e:3b:20:0a:1a:53:46:e8:6b:48:c5:eb:c0:
fa:50:a5:3e:b1:16:77:c7:11:a4:a9:4e:b3:db:47:eb:2f:b7:
8f:c3:c8:9b:c8:cd:54:3a:ac:f2:36:3b:82:f2:6b:76:ef:1a:
3a:68:dd:7e:ec:27:a0:a0:02:0d:6d:0f:45:34:58:9a:af:8e:
0f:5e:94:4f:0a:d4:d0:a1:cf:93:9a:47:f0:47:75:f4:87:69:
4d:da:b7:6e:b4:56:53:98:f8:40:7f:55:a4:b4:fe:62:7c:0e:
cf:8d:fa:e9:5f:63:d5:62:d2:75:cc:9d:8c:d5:e1:fc:52:2d:
73:a1:1b:b6:f8:3a:78:f8:92:0a:06:8b:34:25:59:ba:4b:8a:
d3:79:55:6a:cf:a4:e2:ba:b7:5d:f2:b8:61:6a:22:53:c1:f8:
38:23:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:13 2025 by rpki-client