Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f88baaa-d204-3d0c-8671-92c535b1a11c.roa
File: 0f88baaa-d204-3d0c-8671-92c535b1a11c.roa (raw, json)
Hash identifier: 6a4yUTnbdOxDf9WUG+jPmbrqGr+R/8m6xrlHV1xjLG0=
Subject key identifier: 8E:12:AC:3A:16:9B:8B:54:70:E0:AA:83:6D:55:B6:37:9F:49:5F:88
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848A2A9F03D8921E74CD5A42D70
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f88baaa-d204-3d0c-8671-92c535b1a11c.roa
Signing time: Thu 23 Jan 2025 02:30:15 +0000
ROA not before: Thu 23 Jan 2025 02:30:15 +0000
ROA not after: Wed 23 Apr 2025 01:30:15 +0000
asID: 196810
IP address blocks: 2001:470:3f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:a9:f0:3d:89:21:e7:4c:d5:a4:2d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 23 02:30:15 2025 GMT
Not After : Apr 23 01:30:15 2025 GMT
Subject: CN=a2a17a6f-2d4f-40da-90b7-3715affc11d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:e0:e5:2c:44:91:2f:64:4e:9f:fc:72:48:
7d:7d:05:8a:c8:cd:a0:03:5e:cf:c9:d5:fa:f1:cf:
31:e6:88:27:e3:86:53:f1:68:1d:4c:92:40:4e:c4:
7f:3a:54:a8:a7:19:d5:06:92:52:3b:42:d0:af:69:
e5:4e:ea:bf:7e:79:18:0d:1b:92:af:bd:ce:c3:fd:
95:cb:14:80:51:78:da:6a:c5:88:74:7d:a3:ea:c5:
47:44:35:ed:66:3b:21:bd:ee:73:32:05:c5:41:e0:
31:64:bc:fd:bc:58:fe:3b:b6:7e:d7:3d:16:03:91:
f4:56:c7:b4:e5:8b:88:6b:75:8b:d4:a7:75:e3:6e:
84:3f:58:e5:40:d6:42:62:9b:9c:2d:af:c6:27:1d:
f3:5e:df:20:94:24:37:85:8d:19:09:2c:82:e7:da:
01:87:60:10:89:38:d1:d1:04:cd:7c:93:43:3a:b0:
14:7e:a0:98:1d:c8:53:4b:f2:f1:59:74:a8:a1:3b:
22:96:45:e5:e0:64:a7:f8:95:25:65:9a:af:8b:0f:
d3:fe:50:29:f3:ff:a4:d7:f2:4d:49:75:2d:2e:f4:
16:39:c6:64:52:04:e9:79:d2:f2:fd:1b:2c:b4:a7:
8f:4a:84:3a:b9:85:fb:11:95:0e:dc:5c:40:17:18:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:AC:3A:16:9B:8B:54:70:E0:AA:83:6D:55:B6:37:9F:49:5F:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f88baaa-d204-3d0c-8671-92c535b1a11c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a1:fb:8f:82:db:03:03:b9:fa:71:7f:d4:5c:1e:0d:66:44:
1a:c3:25:1b:f0:ed:28:89:62:d8:74:14:06:58:6e:f9:11:b9:
01:0e:d7:e1:2e:24:73:51:f5:d0:21:c3:b3:5c:0f:bd:d3:c5:
0d:11:cf:09:e6:f9:f7:84:1f:19:2d:8d:b6:da:51:21:33:0e:
bc:9b:a4:af:b4:51:b4:03:4b:db:32:a8:71:de:b2:5b:c9:54:
0a:31:27:99:ed:cc:d1:39:0f:5d:b8:5e:01:ec:c9:69:ba:5c:
f4:da:db:83:74:7c:9a:1b:cb:f4:5d:81:98:3f:39:31:7e:d4:
b9:23:66:f7:6e:31:4c:23:85:83:a8:84:a4:a4:20:9d:8d:f7:
67:d4:79:b9:4a:0d:c3:d0:7f:8a:be:27:1a:9b:6b:57:ab:65:
dd:29:1e:21:40:51:51:a1:82:d9:ff:d3:38:3d:dd:f6:46:be:
68:e9:f2:bb:ff:25:14:0b:b5:19:bb:52:96:53:c1:7a:6d:68:
c7:d1:59:0a:b2:73:23:2c:3d:13:5f:46:43:73:3b:62:2b:c5:
54:7a:24:ae:28:c4:78:c4:26:3f:c1:72:9b:2e:ed:3b:b1:c2:
c4:d1:9d:99:de:fc:e0:1d:e9:27:c9:92:ee:35:03:cc:6c:0f:
11:c1:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:25 2025 by rpki-client