Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03902d79-5b13-3e15-bae8-b2e0464440b8.roa
File: 03902d79-5b13-3e15-bae8-b2e0464440b8.roa (raw, json)
Hash identifier: RMnNzp2Pr09sc9UDZsyT/wcSiMJS8c9BBmB6Zf2fkxY=
Subject key identifier: 8F:82:47:0B:FE:F7:5F:9F:80:8B:79:33:BE:A7:6F:12:A6:E8:C7:EE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584886B06C809988644376DDCD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03902d79-5b13-3e15-bae8-b2e0464440b8.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 38901
IP address blocks: 2001:470:3b1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:6c:80:99:88:64:43:76:dd:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=dc35986f-835b-4236-8606-5714444a0a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:cd:11:7f:e6:b6:cc:05:15:b3:c5:8c:f6:
2c:aa:00:0f:cd:b3:8b:06:c4:f5:bb:7f:a3:71:ca:
96:90:2b:ff:80:64:fc:14:df:fc:fd:b5:16:2d:24:
9f:94:ea:5e:be:08:74:86:72:cd:f3:fc:dc:5d:b8:
32:6a:b6:d1:a9:6f:28:15:d1:8f:28:34:e2:56:f4:
d3:a7:46:05:24:29:94:be:02:49:1a:7e:8f:76:bf:
20:e6:6f:76:73:31:49:5b:f5:f3:83:da:ed:94:26:
40:1a:d0:84:d7:a2:94:49:eb:92:0e:40:4e:cc:ca:
60:99:b8:ca:db:3f:78:cc:74:13:3a:9d:ef:4e:2b:
44:20:e5:20:7f:9f:f8:48:16:ac:9a:20:65:83:8d:
de:4c:c2:d9:cc:26:d1:50:a8:79:2b:fd:fb:92:ca:
1b:3f:03:f3:e8:97:b8:50:98:3b:6f:87:95:2f:cd:
d7:6d:5d:64:6f:da:fd:27:9b:ba:2d:dc:94:96:4c:
02:95:6f:91:48:1a:5d:a7:f9:66:c5:32:13:e1:7e:
7f:3a:a6:34:1b:a8:69:52:dc:3f:44:40:1b:0d:38:
7e:34:21:9b:69:f8:f4:8f:0f:9f:6b:c3:67:f6:e8:
f9:49:49:9c:7d:c4:1f:c2:bb:2d:eb:43:d2:5a:59:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:47:0B:FE:F7:5F:9F:80:8B:79:33:BE:A7:6F:12:A6:E8:C7:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03902d79-5b13-3e15-bae8-b2e0464440b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3b1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:85:46:d8:5a:b1:51:6d:5e:a8:7b:7d:b1:63:b7:d1:52:8f:
b8:13:de:bf:7e:db:8a:c8:3f:9f:97:cf:61:a9:e7:f6:d1:f8:
0f:ba:90:b6:f1:e9:90:d2:a4:f9:88:29:63:69:c1:db:5a:ab:
dd:ee:4b:22:a9:7a:91:1a:15:32:3d:7f:2f:ef:38:73:2c:79:
83:3d:00:55:e5:23:85:61:cc:9b:74:9a:6b:1c:7f:7b:d2:d7:
87:f5:27:98:95:3d:ed:82:9a:84:81:7f:8c:ef:82:0e:71:f2:
9a:e7:ea:db:67:14:4d:6a:0d:8e:5e:23:89:0d:63:b8:b4:32:
56:21:61:ae:be:76:69:f8:13:b8:33:5c:6b:83:55:21:f1:c1:
1b:69:1a:59:cc:ca:c8:18:59:74:8c:6e:72:f6:6d:55:4f:32:
86:2d:ea:6d:4a:fb:5f:f8:4d:4a:6e:38:2b:8f:2e:c7:b1:39:
cf:63:3a:a2:d6:0b:d3:44:14:ac:69:d9:0d:25:fd:0d:8f:15:
01:8e:4b:2d:d6:a0:b0:f9:61:53:ee:cd:71:c9:05:ae:ad:88:
e8:cd:44:6a:f9:fa:71:a7:60:0c:cb:6e:a8:81:ce:aa:f9:18:
e3:55:65:97:af:1e:62:0f:10:e2:b1:e6:f5:02:c9:2e:b0:16:
ad:fe:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:21 2025 by rpki-client