Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5e10fb-cfa1-3260-8869-7d2f11c2bb91.roa
File: 3f5e10fb-cfa1-3260-8869-7d2f11c2bb91.roa (raw, json)
Hash identifier: nY3mhP1LJ9ZLoed+/ZMDcF2nMOqNyN8xMr35NVHY3Cg=
Subject key identifier: 6C:E1:F0:E6:71:35:8C:FA:A1:BF:2B:80:68:32:A8:2C:56:45:BA:21
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D3CC7A59A6B9D834D100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5e10fb-cfa1-3260-8869-7d2f11c2bb91.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 11734
IP address blocks: 65.49.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d3:cc:7a:59:a6:b9:d8:34:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=26dac981-b651-4df0-8baa-1138e61ea52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:b2:c2:85:b6:f1:64:d1:57:9d:6d:f9:b6:
cd:2a:63:9e:ac:48:a3:ba:e0:88:f0:d6:b3:b5:d4:
d1:e1:d3:0b:ed:6d:4c:f8:5e:11:dc:71:00:3a:ec:
3d:98:46:3a:76:0e:4f:fb:04:1a:e1:e0:9d:cf:98:
8e:93:e9:8b:9f:77:93:98:da:3f:2d:bf:98:74:a5:
ed:15:7c:ee:56:63:73:05:f2:27:cc:46:65:e9:c0:
8a:cc:32:b2:72:c8:60:6e:eb:c8:a1:f6:41:c1:41:
31:b0:32:a7:a0:e5:10:b8:78:1f:50:fd:6c:1a:cf:
40:10:7e:bb:1c:db:84:3b:68:09:f6:ac:62:40:d3:
59:bd:a5:04:85:7f:48:22:13:cb:da:11:18:95:69:
f0:53:50:3e:a6:e0:8f:e6:3e:5f:4e:38:ed:f2:8b:
95:c5:4a:27:a4:45:4f:3c:44:29:2e:a3:04:07:64:
56:1a:15:27:4b:90:2a:c2:1b:a2:03:41:87:ff:fd:
63:18:2f:4c:63:0c:83:39:61:d1:2f:4f:84:b5:33:
8f:6e:ad:44:e1:cc:c6:98:4d:bb:db:79:cd:cf:31:
1c:4b:78:89:da:cf:0c:ca:73:e2:f5:5d:48:29:96:
fc:12:31:59:36:38:a6:55:32:f2:8b:a7:09:85:be:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E1:F0:E6:71:35:8C:FA:A1:BF:2B:80:68:32:A8:2C:56:45:BA:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5e10fb-cfa1-3260-8869-7d2f11c2bb91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:21:3c:09:65:24:48:b2:9a:6a:d6:70:be:c1:29:92:2e:d3:
1c:f2:bd:cc:47:d3:b9:1c:0c:55:f8:f2:36:df:ad:db:65:93:
2b:aa:16:a4:a2:5f:bd:63:0c:ca:dd:88:ff:25:11:06:63:ea:
b5:56:b1:69:2e:f4:b9:30:77:ea:b6:21:41:fd:00:b4:57:db:
8c:be:d5:fa:73:61:03:73:a3:a6:eb:e7:4c:98:8d:ae:d1:3e:
28:f4:a3:90:fc:b0:78:1b:fb:df:c1:23:51:7f:61:db:15:f6:
3c:20:f9:3f:9b:c8:33:6b:a4:2b:da:41:31:7d:20:58:ad:43:
7c:4a:98:d7:ad:01:a0:ff:bd:89:f1:cd:1e:5e:6b:a5:35:a1:
6a:19:a0:76:3e:94:e5:6c:d4:3a:03:9e:72:de:28:2f:ee:ff:
e6:86:b0:63:e5:3d:52:26:21:95:a2:a4:ea:1d:4c:3d:98:89:
48:58:48:e2:ea:f6:8d:48:bb:cb:e4:19:48:3b:44:aa:dc:7b:
4f:8c:77:80:37:89:63:8d:06:ad:92:4d:d2:4b:1e:f8:1c:98:
05:2f:f4:ce:5e:18:26:b8:9d:e3:65:89:20:de:28:68:83:ba:
b2:61:8d:12:a3:cf:07:a2:3d:e0:af:29:b0:38:fe:6d:74:67:
95:7d:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:24 2025 by rpki-client