Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/14071398-65b7-398f-ab7c-5f92213cd074.roa
File: 14071398-65b7-398f-ab7c-5f92213cd074.roa (raw, json)
Hash identifier: oBEfP75h7OWz4fuHsL5xFFIlKDaNqs4lvN91uI3ytFA=
Subject key identifier: 43:AD:D6:FA:62:63:39:A2:2B:6A:A4:C6:A0:4B:FD:27:E0:36:5C:BC
Certificate issuer: /CN=87edc032-d938-4504-bf4b-96c599e50195
Certificate serial: 010D0C9F43285848FBF12A9155582868809ABAC0
Authority key identifier: 1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/14071398-65b7-398f-ab7c-5f92213cd074.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 21947
IP address blocks: 65.39.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:2a:91:55:58:28:68:80:9a:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87edc032-d938-4504-bf4b-96c599e50195
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=1ea8d59f-9525-442a-884c-812de9b29469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:59:04:3b:15:39:38:c9:eb:74:61:a4:30:
c1:c2:2d:ba:2f:e3:4b:98:f5:f0:37:be:03:6d:e1:
bc:85:9c:52:94:a6:12:9e:fe:1a:cb:f4:3b:73:f9:
72:a0:be:31:0d:37:b7:60:6c:33:e9:fd:ad:47:61:
10:51:66:18:16:d6:f9:b7:9b:2a:9b:9c:5d:e4:b6:
58:b8:be:5d:4c:69:63:6f:43:c6:31:ed:da:35:34:
cf:cc:b1:6a:c7:07:73:88:37:c0:30:7e:8e:9e:59:
f3:ff:c4:31:46:35:d4:ce:08:d3:48:03:3f:e1:31:
aa:69:55:c8:56:f9:ff:0b:6f:44:6d:b5:95:30:0b:
51:37:75:d0:d2:bf:55:7e:77:45:b1:e2:1b:bf:b1:
1e:8d:ed:c8:d7:74:82:99:2b:b1:b4:a9:94:84:d8:
5f:ce:1b:79:32:a6:39:41:22:24:62:7a:2c:d7:32:
1f:4d:f5:7b:fd:6e:13:17:fe:23:9b:83:d1:61:09:
27:f2:cd:9f:b5:28:ad:f0:c1:23:11:71:ea:c1:21:
c1:8f:7d:ad:d4:29:4e:18:d5:8d:7d:36:78:f2:10:
2c:1c:cc:ab:d7:bd:85:b4:81:30:39:ba:b9:84:36:
d6:a5:44:6e:09:e2:4d:07:e9:2f:45:d5:46:da:46:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:D6:FA:62:63:39:A2:2B:6A:A4:C6:A0:4B:FD:27:E0:36:5C:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/14071398-65b7-398f-ab7c-5f92213cd074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl
X509v3 Authority Key Identifier:
keyid:1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:21:e2:7d:1a:64:3e:09:58:0e:0c:97:2f:77:98:7a:2e:b2:
6a:2a:e2:58:b3:3c:ce:d3:10:3f:42:90:38:91:ff:fd:b1:66:
35:d8:77:60:d7:e6:45:d5:98:2f:aa:c5:46:66:fe:91:2d:99:
d3:46:83:e0:6f:76:3b:7a:54:03:8b:dc:02:31:b0:1d:78:2f:
0c:0d:34:f1:21:85:af:df:83:49:14:69:94:db:6b:07:b7:28:
29:cd:93:e0:62:64:80:d8:9c:ff:70:57:a0:41:b1:f7:7b:b3:
2c:b1:d6:8d:d4:ed:2a:42:8a:92:2e:c3:e0:52:0d:6c:6c:c3:
9d:1f:c4:9f:f1:0b:c3:d4:9e:c6:60:22:3c:59:ef:6d:bb:74:
42:30:c7:88:3b:1c:9f:a3:14:71:6b:a4:99:0b:8b:4c:bf:62:
bd:0c:a8:cc:d1:a1:7b:2d:6b:fd:51:7f:44:65:88:64:d6:f6:
ff:f2:23:2b:cc:04:e9:33:c4:8b:cd:17:85:0d:fb:56:b7:38:
1b:73:e5:82:2b:91:d6:48:8b:c4:c8:f4:e3:01:a1:d1:9e:9c:
2d:1a:5e:23:4a:e9:8f:a9:eb:df:5a:f3:85:11:3a:fd:1e:ed:
5c:27:22:45:d4:4b:2f:5e:5e:a9:3f:db:d0:1b:1e:63:90:48:
17:b3:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:55 2025 by rpki-client