Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b862e42-ad55-36f7-b8c5-08c5e5ca693d.roa
File: 1b862e42-ad55-36f7-b8c5-08c5e5ca693d.roa (raw, json)
Hash identifier: OkuIlv+wUq2Kmhb40o/Sg5Vh6RZ+tl3rwazS53Q6jCg=
Subject key identifier: 2E:8E:3B:F3:3E:79:F4:CD:64:57:32:D6:2D:95:BD:4B:0A:C7:2C:6B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D6A0325A248013FB9680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b862e42-ad55-36f7-b8c5-08c5e5ca693d.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 36103
IP address blocks: 65.49.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d6:a0:32:5a:24:80:13:fb:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a2cff93b-a4a3-4810-b77b-255bb0df4d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:03:a4:85:0c:37:41:c7:b4:b8:09:df:fc:41:
6a:fc:c2:5c:02:37:16:df:74:a1:4c:33:15:6e:cb:
9f:75:db:db:43:c2:f6:06:d2:16:a3:d0:bf:69:31:
af:aa:95:b4:5f:e1:39:28:a1:f6:73:d5:e5:7b:da:
c2:81:9c:f8:2c:fc:40:8f:01:c0:08:3a:a5:97:bf:
39:fc:7c:98:50:6b:86:86:09:b7:61:7f:f4:fb:8e:
bc:0f:ab:f5:0a:bd:53:7f:a7:f1:04:8d:bd:5e:7b:
0e:b1:6a:89:27:50:a4:06:64:bd:ff:85:5c:39:8f:
3f:8c:9a:fb:d5:9c:c2:82:24:e2:12:5d:84:78:81:
84:36:2c:34:2e:ca:62:70:12:dc:a7:f9:d7:ef:cd:
5a:be:7e:fc:55:50:c5:de:cb:d5:a8:2b:e3:34:1f:
c2:93:d2:33:15:a0:87:0a:7f:fb:b4:1b:67:05:51:
09:f2:ad:29:c5:56:26:e1:d1:73:4b:33:71:82:5a:
e6:62:d7:10:b3:c7:b9:07:1e:04:26:e3:6e:b4:c3:
68:d2:87:a6:88:4c:3d:8d:89:4a:24:de:3a:81:4d:
f8:b4:97:10:f8:52:ea:ea:42:2c:98:0b:69:90:28:
35:05:19:b2:ea:45:18:6d:4d:37:17:63:c5:9b:55:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:3B:F3:3E:79:F4:CD:64:57:32:D6:2D:95:BD:4B:0A:C7:2C:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b862e42-ad55-36f7-b8c5-08c5e5ca693d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:e7:61:31:dd:43:0d:27:70:d3:ca:97:5f:a6:5e:95:7c:94:
26:11:89:26:3d:9f:e0:05:fd:bc:11:a6:47:e5:eb:28:ce:63:
25:16:44:d4:a2:11:dc:e8:ce:02:5b:4c:84:44:ab:9a:8c:b8:
30:d8:10:0f:ed:1d:f7:c5:79:4c:39:92:d0:df:7b:d2:d5:1e:
5d:c8:c3:5d:19:b5:2d:e6:b2:ea:ad:ab:e1:8e:33:25:c7:84:
57:f9:95:ce:99:24:85:4a:80:01:8a:15:e7:f3:b2:f7:6c:bc:
e3:97:1b:a4:5f:6a:32:f5:62:f4:49:4b:54:7d:2f:7c:da:76:
c5:9b:6c:73:15:f4:d5:bd:a5:81:c3:a9:84:d8:19:a8:10:04:
6b:bb:9b:1c:44:3b:1a:61:3f:07:1b:5a:e8:fd:65:27:ac:a2:
ce:84:83:a2:f3:9b:c7:ec:b9:fe:62:8b:33:58:d8:6d:44:33:
7c:fc:20:06:8a:dd:5a:b0:30:01:31:ad:55:31:7e:32:f4:55:
ff:18:53:e5:a6:20:ea:19:8f:d6:38:5d:0c:eb:2e:bb:8c:8b:
cd:22:2d:b3:8a:72:c1:ca:af:23:c2:9c:d8:fe:95:82:2d:9e:
39:3e:cd:ae:25:e2:cf:70:ca:ff:62:b4:82:b3:9b:be:6d:8e:
11:71:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:46 2025 by rpki-client