Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36659038-d9b1-3ca5-bbb6-98507d764881.roa
File: 36659038-d9b1-3ca5-bbb6-98507d764881.roa (raw, json)
Hash identifier: B9NmCAymvmGqdQgzB5t9juG6V/J2QXTzQig3bsvnVPU=
Subject key identifier: 55:15:6F:D4:55:8F:3D:F8:3A:52:DE:E8:1C:07:3A:9E:8A:1D:22:DB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D4692C55D5F34F215C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36659038-d9b1-3ca5-bbb6-98507d764881.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 12247
IP address blocks: 65.49.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d4:69:2c:55:d5:f3:4f:21:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=757e6e49-8c7f-4b9f-985f-47f9badac1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:cf:a6:d4:4c:86:c5:75:29:35:65:a9:8b:
e0:08:0b:fb:19:65:98:56:4a:70:f4:1f:b4:5c:8c:
bf:b1:0c:89:c2:45:a5:34:21:6d:71:b8:a3:bb:25:
01:c6:60:89:7d:ed:b3:11:61:ff:c0:94:d3:2e:97:
0e:c7:3e:03:99:d0:04:3c:df:2d:46:bd:df:cf:b4:
c7:8e:cf:c9:2e:ad:17:c5:44:bd:7b:a1:19:11:f3:
2e:3a:1b:2a:2a:f1:49:ed:e0:42:a1:61:fc:fd:3a:
74:21:dd:93:e2:62:6a:df:23:a3:e6:65:55:18:cd:
bb:44:9b:39:84:37:69:3c:c0:e3:7d:52:3e:c6:2f:
1f:3a:2a:04:43:00:52:13:e6:10:9a:d0:cd:ab:9b:
1a:d5:80:c8:41:cf:50:5f:f4:eb:e0:17:35:1e:97:
23:37:ad:d2:aa:45:7a:78:4d:5b:fb:23:0e:52:67:
15:ed:cb:70:c7:38:ca:ae:eb:7e:0f:e8:58:f0:79:
80:62:59:5e:3b:e7:92:a4:0a:fc:78:d4:f5:38:b6:
2a:7a:43:42:f8:8e:eb:da:83:ba:03:b4:64:1a:5c:
1c:2d:1b:a7:82:b3:23:34:fc:73:c8:a6:6f:78:62:
1a:d0:56:49:ea:b6:ca:03:d1:a3:e9:10:18:5b:be:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:15:6F:D4:55:8F:3D:F8:3A:52:DE:E8:1C:07:3A:9E:8A:1D:22:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36659038-d9b1-3ca5-bbb6-98507d764881.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:7b:ae:bc:cc:7d:37:9b:00:0b:bf:26:4c:62:b4:b6:8a:89:
f5:b6:f0:5b:c2:8c:30:5e:8f:7f:75:51:70:26:88:f6:4f:94:
f9:ee:ed:8a:44:a9:d4:c1:3e:82:1b:a3:46:a1:e3:7b:b9:19:
5c:12:77:a4:51:91:5c:a1:97:ba:6f:fd:54:6a:0a:f5:ce:ca:
f7:26:d5:4a:09:91:06:24:36:8a:b9:95:54:a1:f2:da:77:41:
ed:dd:5f:be:38:34:1b:47:3f:f8:fb:67:69:5c:45:40:cb:ed:
af:65:67:f1:81:47:19:da:79:a2:b0:fe:b7:0b:92:68:c2:35:
d6:f9:31:57:ba:2d:7a:f8:e3:c9:0e:f5:d2:3d:c9:26:ab:ef:
78:18:cb:db:7f:d9:97:ca:b9:2a:fc:0e:05:7c:29:8e:99:c2:
59:28:ed:7a:a5:4d:69:ff:c0:bc:76:18:55:0f:e0:97:12:e1:
37:0d:ed:e5:c9:f7:fe:2f:8a:6a:70:98:42:c3:38:1e:12:63:
ab:2c:43:03:2b:99:45:6e:95:e8:32:93:48:a9:91:54:ad:f7:
96:aa:1f:d2:b0:a5:3b:32:ec:e7:0e:81:2b:c0:10:88:69:a7:
b1:d2:a8:1c:6b:b9:e4:57:ff:12:47:a6:d4:b9:8b:28:39:b1:
72:0d:d6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:40 2025 by rpki-client