Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72ece2e-6266-36fc-9280-c6e04b5d7e4f.roa
File: a72ece2e-6266-36fc-9280-c6e04b5d7e4f.roa (raw, json)
Hash identifier: yCtcdr04RtXfL5GvJgwnHLpzMdCdZyqbzn4TqZqN+AM=
Subject key identifier: 0C:7D:B9:CF:B6:DC:88:D0:77:D8:5E:C7:2E:D6:64:AC:B1:64:E5:B3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BC3FCC62BCA3A138D080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72ece2e-6266-36fc-9280-c6e04b5d7e4f.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 54288
IP address blocks: 64.62.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:bc:3f:cc:62:bc:a3:a1:38:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=f931c1de-fd0e-418f-a3d0-9e76a4b7ecf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:7a:4b:1f:ca:e2:0c:18:9d:72:7d:ce:1f:
29:18:f5:f9:92:54:f6:e4:47:92:cd:f8:0b:b9:58:
a0:73:5f:67:fd:ab:b9:eb:b3:57:6f:e5:25:f5:d0:
4f:34:d8:bb:a6:b8:9a:75:7a:0d:d2:8f:97:a1:7a:
32:08:e6:e4:b6:6e:b7:df:7f:93:11:4b:ef:03:2e:
d2:8a:a3:1d:4f:8c:63:69:45:a4:26:f2:8f:97:25:
4a:8e:c5:04:d0:1b:89:07:5e:4e:a5:bb:5a:72:b7:
21:95:e0:e3:ae:a1:02:5f:4f:8d:9d:89:1f:c7:78:
4e:42:a7:11:9a:3a:5a:29:c6:be:1a:1e:23:78:a8:
d9:a9:77:14:d4:66:70:15:98:9b:d3:09:1f:28:1b:
71:40:c8:cc:65:22:cf:35:0c:0d:eb:ea:95:b7:d9:
5e:75:d1:40:2c:dc:7a:d4:b2:51:13:84:92:e8:aa:
85:08:e1:9e:c6:90:70:1f:1e:82:60:5f:0e:32:cc:
0d:d2:e6:b9:3f:ee:4b:22:28:e4:02:c2:54:72:ce:
fb:8e:c9:a1:37:5a:a9:fd:44:1f:bf:3e:60:41:47:
9f:eb:62:20:a4:16:0b:ef:be:dd:d7:37:19:fa:13:
ef:b2:61:01:e0:a8:4b:04:51:b0:82:a7:24:b4:b3:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7D:B9:CF:B6:DC:88:D0:77:D8:5E:C7:2E:D6:64:AC:B1:64:E5:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72ece2e-6266-36fc-9280-c6e04b5d7e4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:3f:64:5f:bc:e9:21:f7:16:25:10:30:1c:6c:a6:aa:5e:6a:
79:49:5a:d2:f5:05:8a:d7:18:14:2b:01:71:d2:1a:48:4a:6d:
a3:f0:fe:51:c9:8a:69:02:a7:64:6d:c0:f3:d1:f8:22:f6:2e:
0a:0d:21:27:a1:82:d5:32:dc:a1:79:68:92:68:66:41:3b:2b:
4b:f8:bf:66:e9:fc:19:3a:d9:d9:b8:2c:00:1d:d8:af:30:bf:
e4:3d:b5:20:a4:45:0e:90:51:8f:fa:3a:ee:6a:ef:a9:50:b7:
26:91:13:08:dc:ac:07:e4:a2:ac:e5:86:a9:63:77:6c:73:03:
6c:43:97:3c:8f:0e:c6:88:40:bf:d8:fd:4b:5a:2a:6b:19:64:
c9:9c:01:37:fd:8f:55:05:42:f9:46:10:18:0f:ac:19:a3:e8:
1d:61:4d:4f:80:bc:51:30:7f:d2:1a:2e:3a:78:c4:fa:b3:fa:
c0:c8:e3:bb:46:9a:4f:76:44:7d:58:2d:15:0d:17:e7:47:94:
dc:73:8b:29:f0:d5:3b:8e:29:69:60:64:c7:f5:ba:9f:16:ef:
85:8e:3a:f6:48:16:84:ba:42:05:b9:32:eb:1b:c9:36:cc:51:
9d:8c:06:5c:81:1f:ee:39:03:3c:9f:bc:4f:85:24:c3:b0:fc:
93:4c:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:43:14 2025 by rpki-client