Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa
File: cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa (raw, json)
Hash identifier: Pi2RIlxnHd75IWYYUcxH4gtzOjANMhZBO9mcNU1UqRg=
Subject key identifier: 36:F1:DB:1F:38:C1:AE:1F:F7:66:42:06:1A:10:0A:45:2D:DF:2C:38
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BCFAD588C178ABB0F0E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 66.249.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:cf:ad:58:8c:17:8a:bb:0f:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=13220bea-e434-41c7-a8f7-da0cae1a54f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:18:2d:14:dd:16:30:af:77:c5:22:4b:7f:
a0:77:5a:09:95:d1:46:bd:d4:99:0c:4e:86:14:a9:
f6:64:29:ee:ec:8f:a7:c0:7d:da:0e:3f:3e:4f:ca:
5e:1f:76:f0:1f:e6:c0:9c:dd:72:99:7a:0b:4c:16:
09:ff:9b:22:f0:27:13:d1:f9:28:2a:9c:52:0f:e2:
92:02:fd:7b:e9:d1:d2:c0:fd:b0:47:8a:be:ad:03:
8d:db:7f:d2:d2:1a:02:26:2c:59:67:5e:40:06:0c:
ee:af:e1:7e:f5:6b:c4:c2:1d:5f:5e:3a:28:08:b6:
1f:21:73:68:c9:81:d0:6d:f8:3d:bf:1f:ec:05:b3:
72:cf:43:04:ea:ae:92:5c:b8:7e:fd:b9:ca:27:93:
2d:5a:37:6c:3d:cc:15:7f:38:22:24:c2:8e:5f:20:
e3:e3:f0:65:da:41:55:f0:37:5a:11:18:38:30:cf:
ae:37:da:38:f8:52:d4:20:f8:bb:76:82:e6:a9:69:
ac:99:d2:d9:b1:51:a3:3e:c4:60:d1:d6:70:9c:ca:
91:33:02:83:ed:7d:db:da:65:4a:6f:a4:44:12:e7:
22:71:eb:a3:bf:0b:f5:66:e4:a4:97:a5:fb:54:d2:
97:f5:24:ff:8b:71:59:e1:f8:e3:54:dc:2a:c6:1d:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F1:DB:1F:38:C1:AE:1F:F7:66:42:06:1A:10:0A:45:2D:DF:2C:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:13:9a:d5:99:0b:a9:b9:a4:22:1d:36:ef:34:7e:d4:26:1e:
14:ca:6e:fa:c2:c7:20:4d:d9:65:11:10:3f:82:7c:4e:53:71:
72:10:f0:f6:b5:13:3f:6f:6c:dc:56:8c:51:40:a1:a9:c8:49:
2f:cb:f2:b0:b0:33:59:91:b0:ac:96:2f:04:72:e1:3c:70:3e:
6e:be:07:37:12:bd:a2:2a:b9:e7:37:1d:58:b9:09:9b:b6:c8:
79:7a:22:c5:be:24:9f:bf:8f:ac:52:81:90:4d:65:4d:75:65:
45:89:6f:e6:9a:dc:26:3c:84:0f:f8:46:8d:d8:9a:3f:68:9d:
09:ae:e2:3f:60:4a:ef:4c:e4:ee:11:87:34:08:91:f5:4e:1b:
62:4b:7f:ae:2e:ab:b2:88:28:ce:5f:d7:a4:34:29:9e:8d:79:
95:79:c5:bb:d1:7c:1c:33:c1:10:c2:b9:dd:81:cd:c9:dc:18:
2d:3e:e0:f4:0b:71:79:81:5b:d2:32:bb:f2:26:40:a5:49:a9:
35:60:f3:2e:98:a7:8d:53:bc:55:75:e6:4e:73:5a:ec:7d:cf:
e0:b4:b6:30:1e:a4:f3:88:da:ec:25:5f:da:97:98:b7:fe:a2:
7e:cf:26:8c:69:9e:9a:e3:63:ee:d9:5d:60:82:ec:f9:86:cc:
49:56:06:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:45:21 2025 by rpki-client