Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9cb9e77-4fe7-3aed-9b22-8c0713f77948.roa
File: f9cb9e77-4fe7-3aed-9b22-8c0713f77948.roa (raw, json)
Hash identifier: 4KolYe2taESoLo7ug+xQdOHHJpBXSxfK0lACEAB4Tcw=
Subject key identifier: 44:AA:76:FF:0C:6A:27:50:DD:31:F9:62:22:41:19:78:DC:68:B6:23
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926B65C31A235B8F0A67700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9cb9e77-4fe7-3aed-9b22-8c0713f77948.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 12097
IP address blocks: 216.66.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b6:5c:31:a2:35:b8:f0:a6:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=98c4006d-fec8-4e76-a6ed-54500e921f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:52:a4:f0:b2:48:0a:e5:77:28:00:85:c5:
06:ec:b9:89:d2:0d:31:1a:cf:9f:52:ab:10:69:64:
6b:a7:ef:86:ce:ad:aa:8c:18:5a:05:e4:ec:1a:08:
e9:da:f8:20:21:71:f4:4b:28:27:59:9d:bf:9f:87:
5c:79:7e:53:62:0b:5b:3c:1b:e8:35:6d:81:46:a9:
b0:54:83:cf:7b:80:ce:cb:3a:61:5c:4f:4e:3c:2f:
c5:98:e7:46:35:34:1b:b0:89:b8:c5:5a:d0:29:b8:
bb:b1:f8:15:99:e3:0f:71:cc:29:d0:9e:34:48:67:
74:68:40:1e:26:a1:fd:23:d5:dc:ba:7d:36:22:93:
59:d0:a5:5a:b9:e0:7b:5a:69:ab:ec:c3:79:14:ac:
e1:60:c6:59:c8:74:13:b9:06:16:84:6a:08:f8:e6:
13:4a:81:99:94:4e:00:af:94:77:36:f2:d9:6d:29:
44:61:83:15:6f:cb:70:2c:81:c3:09:35:4f:ac:76:
08:af:c9:17:2c:ab:1d:ff:28:f1:6e:30:cd:f4:81:
8f:45:b9:ea:a7:db:b5:9e:64:4e:a1:44:22:38:04:
c9:27:e9:fe:a0:88:bd:ff:d8:f7:ef:c8:c2:2a:69:
a3:e7:e3:b2:5c:2b:4c:7b:f4:36:c7:cb:31:02:08:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:76:FF:0C:6A:27:50:DD:31:F9:62:22:41:19:78:DC:68:B6:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9cb9e77-4fe7-3aed-9b22-8c0713f77948.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:2b:b6:d6:db:a9:d1:4f:67:10:98:4e:52:8f:a6:4f:a8:78:
0b:16:b1:7b:9d:cb:ec:1d:6e:b9:2e:ca:45:bf:92:9b:ff:4c:
fb:40:9f:be:0d:f3:7d:93:30:f0:24:c2:29:4c:24:a2:bd:a4:
5e:12:45:de:c0:24:f2:83:6e:d1:23:9e:4a:9f:e6:73:48:8d:
fe:2b:bd:6b:de:43:42:2f:e8:9c:39:c2:b0:41:15:ab:2c:82:
c1:ba:8a:ed:08:ac:e4:b4:16:32:26:92:50:15:78:e9:5e:e8:
59:e5:cd:cf:45:2e:3c:2d:e9:6e:74:f4:45:b4:5d:8a:d1:a9:
6b:82:e1:09:25:31:81:6b:c4:97:74:0c:c0:a8:b4:59:12:a0:
74:c8:5b:22:db:da:19:a5:f1:57:78:07:d8:a8:d4:1e:53:27:
1b:1c:28:35:a0:f0:9d:93:70:c7:52:cb:1a:9e:57:dd:35:d0:
b3:f2:db:a7:d1:c4:b9:10:aa:82:99:0c:73:c5:c6:41:79:cc:
62:31:84:7a:25:10:18:40:f7:2b:06:a1:00:b6:bb:61:a8:a4:
42:ed:d2:55:35:73:87:19:3c:34:5e:dd:40:6a:41:c9:f9:2a:
df:d7:48:d3:ed:08:9b:4b:04:fb:89:46:6c:25:d4:03:05:4d:
6f:d7:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:12 2025 by rpki-client