Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9106966a-062c-3184-acc1-9cf3a7deeac7.roa
File: 9106966a-062c-3184-acc1-9cf3a7deeac7.roa (raw, json)
Hash identifier: JKMG5Hx2bS7EoYAsDD8+C1XQ8TO6uWjJ0kNw3MTXLiI=
Subject key identifier: 9A:16:8C:0A:E9:3E:70:A3:33:98:8B:6E:32:28:49:AD:F4:DD:77:8B
Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
Certificate serial: 010D0C9F43285848BE862FFB06D66920D91F4600
Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9106966a-062c-3184-acc1-9cf3a7deeac7.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 11067
IP address blocks: 65.79.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2f:fb:06:d6:69:20:d9:1f:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=ba8a6000-cb61-4ed0-9651-f1c99d5eb0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:26:7f:2c:a6:16:cb:9e:8d:b6:e5:6b:a7:
c1:16:55:fa:f4:df:da:57:25:d9:d0:a9:ad:40:9c:
d5:d6:78:75:f5:d7:c2:6f:f6:58:6a:3a:5c:c0:ef:
2d:78:dc:32:7d:10:d3:83:97:56:d5:5c:ab:c9:f8:
ff:8f:59:22:e8:3c:52:e5:d5:f3:eb:20:96:54:1e:
b3:f1:f5:0a:85:81:b8:fa:26:4b:d1:10:2b:cc:6c:
81:55:92:3e:ea:6b:c9:78:26:8c:a3:00:28:26:6b:
ad:4a:2b:02:67:37:1e:09:9e:c3:4a:01:32:fc:cd:
66:cc:68:d0:23:4c:d1:13:da:3c:74:d6:56:18:96:
76:7f:3d:cb:6d:db:0d:5a:21:4f:2e:11:a0:8e:b9:
c7:4a:75:41:5a:23:e2:73:be:19:2e:71:c2:af:5e:
cd:9a:ad:a1:5f:ba:a0:6a:0f:d6:ec:b3:55:67:fe:
15:f5:62:0b:80:bd:2e:fc:bd:64:65:51:92:37:98:
bd:a1:07:20:05:40:85:41:36:21:0b:3a:a2:12:1f:
d3:28:f0:ee:dc:86:aa:e1:58:7b:33:d5:a5:d5:5d:
19:76:56:5f:34:1f:23:b2:24:fc:82:68:03:65:46:
2c:fd:d5:6c:87:1b:1a:01:d0:90:be:1f:c1:85:f4:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:8C:0A:E9:3E:70:A3:33:98:8B:6E:32:28:49:AD:F4:DD:77:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9106966a-062c-3184-acc1-9cf3a7deeac7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl
X509v3 Authority Key Identifier:
keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
sbgp-ipAddrBlock: critical
IPv4:
65.79.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:78:39:0d:98:05:2e:34:ec:42:d6:e2:a4:e3:9b:10:5f:89:
94:94:6b:06:61:37:49:ee:64:73:0c:45:81:8d:e6:27:2e:11:
07:59:cd:0c:bd:24:cd:89:bc:19:5d:ed:c8:bf:a5:3a:9d:b0:
1f:ab:1a:a0:f2:80:a6:35:12:61:6a:5a:b9:2a:65:0b:24:97:
a2:0e:0c:23:16:6b:49:b8:b3:e2:f5:45:b0:7b:ae:40:a5:9b:
d0:c5:2e:84:f3:c7:a7:e9:86:cb:51:3d:28:ef:65:21:f3:1d:
c0:98:4f:b3:ed:d6:5a:52:10:51:a9:f6:ce:41:72:83:83:77:
a5:50:fd:64:1e:bf:12:a3:c7:9b:4e:0c:d1:5e:ba:f6:92:85:
a5:39:1e:dd:3a:fd:6e:b3:aa:22:09:b6:3e:80:cc:57:8d:74:
9b:0f:aa:e6:4c:75:20:3f:0e:12:e3:cc:be:7e:6e:ff:47:1b:
88:42:fc:56:bc:7f:90:85:cd:26:f7:72:67:a2:f9:76:7e:33:
80:8f:44:98:c2:6d:c4:96:eb:9f:77:6c:33:a8:f6:51:b7:77:
3d:21:5e:7d:99:22:d5:26:8f:d2:67:b7:e8:c0:47:7b:7b:e8:
ea:8c:61:fc:81:0a:c2:22:c6:dd:9d:f4:ef:d8:3e:0b:c2:9c:
48:80:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:05 2025 by rpki-client