Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa
File: 027e8105-6846-3d39-8fe1-c08048af3419.roa (raw, json)
Hash identifier: eNrOu+tfLmG16g57+mKKveNSfgroI0Uzw1G8a822vLk=
Subject key identifier: 65:B9:EB:AD:CC:67:66:89:96:BD:50:AA:82:C2:6B:7F:DB:DD:43:6B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEDDF3613F5CD58C59F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 398273
IP address blocks: 2001:470:cd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ed:df:36:13:f5:cd:58:c5:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=22185a57-40cd-491c-af8d-d92b3031b516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:84:2b:9c:eb:e3:fe:5b:97:cf:49:cb:99:
94:9c:75:91:d1:68:60:38:eb:9b:4a:d6:2a:46:7e:
1b:c1:fe:bb:b5:09:2e:a4:c8:36:84:b2:cc:e5:2a:
3a:9f:ca:3e:e3:d2:d0:0b:6e:dc:9e:7d:47:cf:15:
48:1e:5b:97:e2:04:a1:54:dd:72:38:44:00:87:1b:
5a:3d:1d:1e:e0:f4:97:09:bc:d7:e9:98:16:19:e9:
f4:ff:61:f9:c0:97:c9:3e:2b:d3:aa:ad:5a:3c:8b:
29:f4:2f:e6:49:0a:12:b5:bd:4c:ba:64:1e:9a:35:
f6:1b:8b:ad:a7:27:e2:ba:21:30:1c:a0:85:09:d1:
c9:4c:e0:b1:ef:53:37:46:93:60:55:cc:30:38:11:
cb:4c:86:59:c6:7a:ef:5b:4b:be:24:dc:2c:2b:aa:
b3:bf:c9:85:05:2d:e2:e5:4c:2b:8e:b0:29:dc:07:
b2:e2:2e:29:42:ea:73:13:2e:dc:e9:23:8d:68:d9:
ae:cb:1d:9c:a8:39:07:c8:22:de:e6:8c:87:c3:4a:
1b:9e:78:14:29:11:df:27:2f:aa:f5:10:93:04:44:
aa:d7:6e:e8:4d:85:67:7d:63:53:84:a1:84:ef:5b:
f0:9a:a8:a0:f9:1b:bc:74:85:0a:d3:2f:69:f2:15:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B9:EB:AD:CC:67:66:89:96:BD:50:AA:82:C2:6B:7F:DB:DD:43:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:cd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:97:e0:1b:b0:49:0e:c3:48:28:8b:cd:02:69:52:6c:3c:c2:
c8:16:f3:19:7c:04:a9:6e:81:f4:f9:4d:83:c1:c8:24:9d:d0:
62:b1:a7:24:bf:69:0f:78:c7:a6:da:48:ed:8b:b5:3f:0a:ce:
ef:b1:a6:78:1e:2d:d0:fc:e6:04:0a:1d:f1:13:9a:5c:f0:48:
0d:03:83:10:14:99:42:96:5e:b8:d4:31:78:99:57:d1:38:b8:
53:cf:b3:73:93:68:d3:23:c9:93:5a:91:a3:df:95:f9:7f:92:
8e:9d:cf:7c:ef:c8:22:2d:c0:a0:91:cb:a7:a8:7b:76:01:ee:
6a:2e:a7:28:18:19:a9:6e:98:16:6f:4a:3d:be:88:71:b5:f6:
4c:91:ac:3b:fe:f0:05:fb:82:61:47:39:19:a7:19:eb:da:99:
73:cb:2a:48:77:74:23:89:46:de:91:02:45:40:27:76:a2:51:
53:2c:8a:28:0f:64:01:db:3a:2e:ac:5f:9c:8c:8d:ee:e4:91:
2c:67:7d:d4:1e:00:e6:91:92:33:ea:13:54:3a:8a:15:35:da:
4f:eb:68:4f:8b:ef:c1:3e:0c:7b:a3:d6:72:cf:9f:fc:25:51:
d4:a6:55:8d:49:5e:c2:a0:56:70:78:93:06:e9:05:f4:a4:39:
63:27:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:26 2025 by rpki-client