Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa
File: cbac2488-f4b2-3b9a-80e2-176f1395516e.roa (raw, json)
Hash identifier: NiOqkU78mSbQszpY7/0KxfHcmbsCqZndBs9Ozd7m3lU=
Subject key identifier: 9E:4B:1E:26:70:F0:7A:02:32:82:06:FF:3A:FD:8B:83:95:72:B4:89
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F65BDF850CEEF0762A88D530
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 3491
IP address blocks: 65.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:df:85:0c:ee:f0:76:2a:88:d5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=8ab6796f-c157-464a-8c4d-0abb26f9f31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:4f:17:61:6a:97:b0:18:b3:49:77:8d:ad:
ee:41:d6:69:29:73:e1:ed:37:89:e8:ee:39:47:c5:
36:c0:f3:05:22:3b:3c:81:5f:8c:17:a5:a2:5e:d6:
fb:23:f4:04:63:97:29:f2:73:4f:42:d1:d8:8e:7c:
78:d1:ac:2f:0a:0e:75:3b:62:21:31:c0:c1:f7:28:
a5:e8:d7:40:95:6e:cb:86:1f:63:1a:29:32:f4:f8:
37:09:33:ec:7f:95:49:fc:6d:14:30:00:8d:47:20:
e3:61:2e:b6:24:b5:6b:fa:1e:2f:95:b0:78:4a:56:
d2:b6:2f:ff:ed:97:24:d0:29:bd:3c:23:98:d3:6c:
8f:3d:70:8a:70:6a:61:81:93:ab:7e:52:be:0e:5e:
04:2f:62:e9:f1:dc:54:f5:d1:fa:d3:b0:05:7f:e4:
65:bf:cf:a2:c5:95:06:e8:d3:dc:80:90:3a:c5:1b:
c7:52:d4:8c:60:78:16:c4:a1:53:7c:82:28:6b:fe:
b8:cc:18:00:b3:ae:73:d0:3c:6e:9a:70:8e:ff:08:
5f:79:ca:45:9c:d0:f7:cc:8c:66:8d:e5:3a:2b:8c:
86:91:67:f4:69:01:c6:e0:92:f5:c7:84:1e:1a:2f:
10:21:25:4e:21:f4:ec:c2:25:0d:b2:e2:8f:a3:a3:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4B:1E:26:70:F0:7A:02:32:82:06:FF:3A:FD:8B:83:95:72:B4:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
65.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:87:1a:8e:c1:ee:a2:31:30:65:56:52:2a:7f:43:c2:ae:c4:
30:23:b2:e8:72:3b:be:41:15:0e:e9:8f:51:36:42:c5:4b:f9:
aa:65:1b:0f:64:ec:9d:3b:73:c6:7b:f7:8a:40:ea:b0:69:c2:
21:50:53:76:f8:d3:ce:df:b5:1b:67:c6:a4:53:f2:46:6a:dc:
6a:48:0c:67:e7:58:61:23:6c:db:fd:c6:c3:5c:ac:8e:74:34:
e4:17:ac:de:89:7a:cf:81:0d:32:2a:07:29:5a:c4:76:32:fa:
f4:5a:0e:07:70:c7:99:8f:30:dd:3d:f4:17:89:ab:a9:cb:be:
41:d6:14:90:59:08:29:0b:fc:bf:70:b6:84:b4:a8:da:fd:06:
21:65:54:d8:0f:d9:bd:f2:de:de:83:64:c3:51:28:e3:2a:86:
1b:a4:2a:e3:1e:1c:61:ba:b0:90:39:c2:e0:f0:c5:c2:c4:1d:
89:e3:00:bd:6a:25:84:eb:b7:73:84:b5:81:62:e1:dd:8e:cf:
88:07:48:02:77:94:77:72:64:ea:d5:25:8e:47:d4:2e:60:49:
a9:76:66:68:71:a4:e3:9a:1a:ca:8c:23:dd:5e:eb:bb:9d:fc:
26:80:03:ca:0b:ce:f9:51:0d:9d:d3:25:91:dd:7a:c6:ec:56:
4e:12:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:09 2025 by rpki-client