Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4b4c128d-f3a7-3c54-aad8-a115525ef2ef.roa
File: 4b4c128d-f3a7-3c54-aad8-a115525ef2ef.roa (raw, json)
Hash identifier: 4xCwOu/YetIo9IxLbU/gMqEiMb0SAWHfNlJnrJeMr64=
Subject key identifier: 1B:FE:CF:85:A5:A9:D6:F8:C8:E7:1E:F2:EF:08:C2:82:7E:79:86:0A
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F4328584940393FC0AC9128BFB66845C0
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4b4c128d-f3a7-3c54-aad8-a115525ef2ef.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 3214
IP address blocks: 65.49.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:3f:c0:ac:91:28:bf:b6:68:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=7fa1a98c-7c5b-435c-bd04-dda7297405ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:79:5f:69:f1:be:eb:07:9b:7c:a4:3e:e0:
2d:a3:8a:8d:ca:fa:5c:0b:d2:2a:45:67:4e:06:b6:
cd:7c:20:92:37:5f:69:fc:f8:b0:61:ed:ef:82:31:
1b:d3:bc:c6:ee:79:64:56:e7:9d:1f:94:66:af:f0:
63:54:7b:51:f4:0e:f0:e5:ec:4c:f7:c0:4d:ec:ab:
15:70:3c:0b:9a:f8:ae:6c:74:42:7d:a2:87:b4:81:
c4:1a:f9:c0:cf:37:88:99:5f:5c:34:cb:f9:0c:4b:
41:8b:0f:45:76:c1:fd:7b:82:f8:ba:29:40:fa:fa:
10:63:76:bc:f8:8e:06:e2:15:33:ca:ed:3b:50:0a:
5a:05:9c:b4:eb:a2:0f:55:60:a8:b5:9f:e3:0b:72:
bc:70:4b:fa:e7:48:91:36:2b:3c:b9:50:c9:cf:67:
b0:f9:89:75:9d:44:0b:90:ca:6b:01:1f:1d:be:79:
17:c1:bd:32:57:48:2e:ab:dc:0b:5a:fa:95:7d:63:
fa:50:a7:15:46:7c:67:cb:08:67:b0:81:b0:b8:63:
99:bd:a4:0e:4d:8a:39:98:ef:f1:ca:bf:1b:d3:a6:
13:5b:6e:d5:2c:7a:d1:94:08:54:87:19:ff:52:18:
ef:2e:a6:1f:91:ae:be:75:5c:08:15:2b:e6:3a:ac:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FE:CF:85:A5:A9:D6:F8:C8:E7:1E:F2:EF:08:C2:82:7E:79:86:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/4b4c128d-f3a7-3c54-aad8-a115525ef2ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:64:ec:cd:4b:21:c5:cd:00:fa:bc:02:61:2e:ef:5d:ca:2b:
60:27:d5:3f:2a:49:c6:b9:94:de:3e:1d:63:58:58:dd:fc:0c:
bd:a9:a2:54:9f:6b:5c:4c:3d:96:f6:c4:04:13:fb:d9:68:fb:
99:97:5c:73:e9:53:d9:8a:a0:9b:29:1b:29:1e:c7:c0:49:d3:
66:7a:f6:89:b9:c9:99:9f:90:5f:f8:c5:e6:da:d2:9f:ba:8d:
08:39:81:dc:b1:f9:df:28:b7:8b:2a:55:df:e1:fc:c3:2c:5d:
f7:54:67:4d:86:2f:a0:da:29:76:2a:ce:1e:4a:60:48:7a:98:
41:b9:86:23:d8:a9:54:a6:34:f1:8c:1a:28:25:d2:cd:2e:ef:
60:85:41:54:28:20:1a:53:cd:c5:c1:2f:91:bc:d9:a9:36:c7:
7a:22:6a:ac:fd:cc:d5:41:c8:76:6b:9b:d8:52:34:b2:f3:6a:
e4:3b:47:c7:a4:9d:ab:23:f8:c1:3f:73:0d:ce:de:01:68:0e:
51:1c:87:1b:ea:64:57:3b:e9:a7:45:4c:07:7e:2c:8a:f1:85:
32:5e:fe:1c:cd:6e:a3:d2:cb:c6:ff:bb:88:3a:9c:af:f0:a0:
e5:d5:f4:6c:6d:d5:b2:9e:8f:dd:ed:8c:c5:d2:e5:b5:0d:fc:
0b:34:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:11:57 2025 by rpki-client