Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/633bf982-79ee-33c8-acf6-20e0d291a40b.roa
File: 633bf982-79ee-33c8-acf6-20e0d291a40b.roa (raw, json)
Hash identifier: AnCU/d2bqZVt7vpsVa9OgH06KO02wu0aWdYRNlwGZ08=
Subject key identifier: C3:28:0B:E4:D4:73:E1:C5:07:C7:90:57:B0:FB:C1:D7:6D:A8:67:8B
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584955295876D8F214801B9D3980
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/633bf982-79ee-33c8-acf6-20e0d291a40b.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 6279
IP address blocks: 65.72.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:58:76:d8:f2:14:80:1b:9d:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=d25b98c8-e76c-4f27-b3ee-acc418de7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:2b:34:be:3e:b6:21:29:54:e2:d0:71:eb:
f0:a8:b0:eb:d4:8d:39:aa:e4:00:eb:a7:e2:cb:ba:
e6:74:63:77:63:be:d8:a2:dd:56:a6:4b:d9:87:82:
b7:4f:6b:2c:f9:68:85:d2:c0:1b:c9:49:3c:e1:76:
ee:98:2b:71:71:9b:3a:04:ec:4c:89:c1:e0:a3:e8:
d3:d2:3c:60:02:fc:a9:b3:a8:01:1c:2c:6e:f3:a7:
af:d7:b9:67:2b:25:2a:21:bd:cb:58:54:b6:5b:3d:
67:47:1e:fe:f8:91:af:72:8e:5b:30:f8:9a:8e:2a:
9c:ec:35:47:87:f3:4b:e9:77:8a:9e:03:ab:e6:1b:
65:03:e0:92:fd:98:52:39:94:ad:8c:e0:5a:97:72:
44:2d:a3:21:76:f8:dd:4c:ad:0e:55:a1:0c:32:a8:
b5:f2:59:17:ec:6c:12:96:f5:d9:01:01:72:9d:88:
c1:26:66:0b:6b:ba:5e:d3:1e:74:d1:f5:72:bc:e8:
d7:af:2a:1b:65:b7:44:c5:f2:68:eb:fe:1f:ee:c9:
77:4b:91:37:6e:3a:64:19:65:6f:fa:db:a8:e4:ac:
ca:b6:05:07:b3:c4:5c:81:10:91:b3:9e:10:51:84:
91:b5:b4:fd:8f:39:f7:c0:ea:77:a8:ea:55:2b:ca:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:28:0B:E4:D4:73:E1:C5:07:C7:90:57:B0:FB:C1:D7:6D:A8:67:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/633bf982-79ee-33c8-acf6-20e0d291a40b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
65.72.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:c8:ce:a6:e8:fa:5c:2f:32:dd:c8:ce:99:ca:15:ab:a3:7b:
a2:07:db:fb:a6:81:74:a1:be:27:d1:a3:ec:25:31:35:cb:0b:
d5:05:05:67:13:5e:01:d7:20:72:81:4c:ca:46:da:7e:5f:05:
51:70:01:f0:f4:9e:6c:78:54:13:53:5a:30:79:9c:e6:e0:c7:
38:7d:dd:60:bc:4d:11:ab:15:b8:69:71:0c:75:04:a1:5b:d5:
d9:e0:2e:3a:98:56:7d:87:05:0f:15:28:4a:61:22:c7:ac:b8:
be:a6:86:0f:da:3e:33:3d:d8:49:ba:fe:ce:85:01:f4:8c:70:
e6:02:8d:8f:ef:74:90:95:ab:83:15:05:0c:ca:53:21:d7:44:
55:e1:73:60:80:ff:d4:3e:34:66:01:3e:b8:bf:6e:96:ee:48:
56:b0:5a:67:bb:67:61:3d:bc:46:ac:5d:7b:d6:56:9c:54:73:
86:34:94:7f:f4:a0:f2:d2:ce:56:02:6a:1d:fd:89:99:5e:69:
77:c5:44:24:16:e0:a7:64:c1:5a:c3:ff:05:92:8c:53:f0:ce:
7b:d6:18:5a:1c:55:b2:da:c2:f9:e4:9a:0e:e9:e2:c6:29:8f:
30:67:e6:27:97:bd:8f:82:f5:84:0d:30:87:88:68:69:fc:e7:
05:c6:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:18:27 2025 by rpki-client