Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f60e3fd-7bda-3426-98a6-d505061cf5d3.roa
File: 1f60e3fd-7bda-3426-98a6-d505061cf5d3.roa (raw, json)
Hash identifier: LMWohvP7aZAmfdZrPb7atnO3tYrnyc45KsSCZ3eRlLI=
Subject key identifier: 12:7C:19:37:0C:A2:BE:60:6A:66:5D:1E:7E:C1:D1:FF:F3:78:2C:2C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D4818C86DD1467612240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f60e3fd-7bda-3426-98a6-d505061cf5d3.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 30712
IP address blocks: 65.49.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d4:81:8c:86:dd:14:67:61:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=ac49922a-2a4c-48ef-ae5f-d554857d6ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:e7:7b:a2:d5:fa:d3:4f:ce:51:71:86:fd:
26:6f:d9:05:38:23:49:40:4f:75:70:48:32:c7:67:
a0:1d:cb:46:f7:c4:c0:4f:63:ff:35:aa:a4:49:2a:
5d:5d:98:52:a4:67:68:fb:b3:d5:50:d4:e4:e0:1d:
81:cf:1a:a0:64:cb:c9:f4:ee:af:a6:26:e4:7d:ec:
95:18:91:e5:48:74:e0:89:95:46:a3:59:ed:a6:40:
00:66:95:f0:64:da:56:e9:3a:74:54:0d:a4:d7:f0:
fa:cf:b4:ec:7b:0d:e3:de:2c:7e:67:40:dc:91:27:
99:80:5b:ff:ef:f3:dc:c1:75:22:08:60:5a:c5:79:
24:dc:ed:b2:22:ca:cf:aa:99:e5:12:62:24:a1:04:
79:37:dd:04:76:63:39:91:b9:9d:c4:ae:7b:85:a4:
16:11:19:b6:a3:59:3a:a7:3d:ae:47:30:8f:56:47:
01:6a:3e:7e:e8:93:da:52:07:88:f2:81:6f:08:5e:
5a:42:21:ef:c7:be:c6:3d:f9:b2:5a:33:60:eb:27:
3d:5f:d3:d0:60:b3:03:10:1e:33:21:5c:2a:be:53:
d6:ca:6f:4c:76:53:63:fa:cc:d5:26:d9:76:a7:8a:
0d:fb:7d:e6:04:7f:88:a7:1a:56:fb:6e:82:f4:28:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7C:19:37:0C:A2:BE:60:6A:66:5D:1E:7E:C1:D1:FF:F3:78:2C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f60e3fd-7bda-3426-98a6-d505061cf5d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:a3:dd:05:9a:ab:0c:09:07:95:60:e0:9c:e8:32:95:0f:c1:
93:39:05:0e:45:49:bd:24:c1:9c:c6:33:05:28:0f:a8:e2:5f:
30:35:7b:8b:98:b5:18:5a:61:1a:3a:7a:5a:b0:28:29:9d:55:
c9:08:78:b7:0f:98:af:eb:67:35:bc:37:7c:cd:53:ae:ea:49:
52:67:a3:d0:6a:78:60:19:9a:ab:64:c1:bd:7d:a9:29:37:97:
34:8e:cd:e1:69:14:88:3c:21:58:c5:96:08:a4:50:fa:a5:3f:
b2:10:f5:5a:c8:93:6c:7f:e3:0c:4c:d7:56:9e:50:e3:d6:5d:
3a:91:f6:92:30:0c:d8:7b:e8:78:a7:38:f7:cc:61:b5:2c:e0:
0a:07:ca:ae:07:6e:14:50:42:a0:f9:91:53:36:11:70:f8:97:
6e:91:47:07:c7:c6:33:1f:2c:c2:ad:60:c3:a2:03:09:7f:1b:
08:08:06:db:58:96:d7:dd:00:c0:3f:fb:e3:4b:17:e7:bd:e1:
05:52:42:5d:58:6b:49:24:dc:1b:93:2c:3b:96:72:c0:d5:9d:
b6:2c:a4:ad:0d:f8:a0:14:78:49:19:94:27:97:86:1e:51:11:
6a:60:83:7c:3b:9a:a7:3f:6d:7a:ae:e0:35:b1:4e:22:7e:ab:
6f:ce:f8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:03 2025 by rpki-client