Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa
File: d822b996-b4d6-3c32-8014-b7c1910343e1.roa (raw, json)
Hash identifier: J+MnVUOi97oPINWo4C9e+gIo0TWFM8Rgl7cKyM0KAOA=
Subject key identifier: 34:1E:48:21:F0:58:EB:02:C9:81:07:0D:2C:A4:1F:8B:F3:EE:C2:05
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D5EE639EC8B6AE84E380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 22300
IP address blocks: 65.19.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d5:ee:63:9e:c8:b6:ae:84:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=8a7ebe5b-7acd-4479-b7ca-3fd6d450f108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:1b:2c:79:b2:35:38:20:e7:cd:1d:9c:36:
83:c2:75:72:38:68:e3:6d:7a:a5:b8:99:54:ff:4f:
21:84:d3:22:41:0e:99:88:71:66:52:eb:30:46:52:
df:2e:1f:c4:67:b5:68:be:ca:4d:55:2b:28:4d:55:
f4:ee:08:3d:4f:79:7f:49:c7:98:b1:05:92:1a:12:
f7:5a:d9:90:9f:ac:7e:80:fb:a2:9a:0b:27:a2:22:
b8:5f:fc:14:f6:84:67:cf:ee:cb:e1:b7:89:26:44:
bb:f2:ff:95:e3:2d:d7:9d:7d:0d:69:03:10:2b:91:
d7:6a:1e:a3:ef:e1:7a:b6:db:a6:5b:fe:bb:1d:58:
5c:51:3b:7d:59:20:8a:e8:f1:9f:6f:fe:99:d5:72:
c8:26:4e:7e:3c:8b:24:62:f2:5a:c5:cf:c6:3f:77:
4e:23:fc:56:a3:1b:2b:35:bf:3f:0b:55:d0:45:1f:
7e:33:8f:63:66:68:dd:37:05:b2:71:0c:09:8f:7c:
d6:b8:78:25:16:08:fe:b3:4b:a1:d9:67:dd:79:47:
99:57:8b:f1:28:83:da:af:c7:ed:28:3c:a1:23:43:
c9:60:7b:49:ac:bd:c0:3b:a7:a2:7a:36:c0:be:07:
2c:40:e7:0c:87:83:bb:5d:3a:39:ae:95:1c:0b:04:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1E:48:21:F0:58:EB:02:C9:81:07:0D:2C:A4:1F:8B:F3:EE:C2:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.19.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:5b:87:3b:9b:a6:70:00:76:5d:5b:13:86:1a:28:be:6d:c9:
c7:a4:4c:fd:5a:df:18:a6:d1:b2:9a:47:2a:e7:ca:46:e3:54:
f0:2a:27:7a:3f:76:92:22:87:f2:b2:1d:e6:6b:7c:26:ab:d9:
72:a9:a7:7a:1a:b4:54:05:2c:e3:95:11:d5:67:2c:b2:78:0b:
2a:ab:51:bb:3f:be:81:54:43:63:a5:2c:fa:98:bb:5f:f3:c3:
c4:91:36:9a:20:21:3e:7f:11:c0:c5:ad:ae:1f:b0:a4:06:85:
72:3f:aa:1d:fe:10:5c:5b:9a:a0:68:3d:66:7e:63:d2:c0:7f:
4c:7f:5d:6a:94:2f:51:80:61:ab:51:e9:57:05:04:61:0f:33:
b6:fc:51:9c:a1:ca:b7:f9:2a:1e:a0:e7:bd:4d:3a:52:18:07:
e1:b3:0d:3c:3c:13:93:08:d9:46:c5:b7:2c:79:ea:73:0f:28:
2c:65:cb:da:41:03:49:ee:e5:29:75:91:db:c0:55:61:6d:1c:
08:1b:af:5c:68:96:0b:f0:97:44:e9:58:5c:4a:d0:aa:4d:b5:
5c:18:cf:6b:75:dd:e1:56:12:db:86:3c:3c:47:f5:9e:7d:3c:
c9:fe:b5:2b:fc:e2:fd:24:78:1f:2e:31:a8:a9:c7:d4:b5:a9:
77:b9:a2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:38 2025 by rpki-client