Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15e3a99d-0bb5-3cf4-90a4-64eccb8c306d.roa
File: 15e3a99d-0bb5-3cf4-90a4-64eccb8c306d.roa (raw, json)
Hash identifier: 6PmjBTeEdYOkLpYIfCYkqjYQPgQfdTyIvYd+ZdTYbhQ=
Subject key identifier: 3D:47:0A:A2:A9:09:C9:4A:E0:BE:21:51:A4:41:84:62:6F:4C:52:E1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01E7A09F4F0598276A880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15e3a99d-0bb5-3cf4-90a4-64eccb8c306d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 6698
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1e:7a:09:f4:f0:59:82:76:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=1429cd3e-451b-4e97-9b83-aaaa76722972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:41:33:16:ed:bf:9b:a1:ce:cd:a9:23:eb:
c1:9b:d5:f6:c6:26:a9:96:22:c5:3f:34:07:bc:7d:
13:c4:86:5f:4b:f5:ba:a8:b7:b4:d5:ce:5d:ac:44:
86:a1:8d:f4:99:f3:c9:9d:93:6b:d6:c1:92:79:9a:
4f:2d:22:d8:1b:10:d8:ae:3b:a5:50:b8:84:9e:05:
ea:48:89:91:a4:e6:3e:3f:e4:a2:f1:a9:0b:6e:39:
d8:78:2b:c4:f5:3c:d0:1b:06:a1:18:14:1f:d5:8a:
74:ef:bb:30:61:8e:dc:51:35:db:a2:3a:dd:44:01:
e1:35:d3:e7:72:30:78:57:84:6e:cf:05:0d:0c:f1:
f9:d2:51:8c:c9:87:74:23:2f:cf:78:7b:94:6a:5b:
50:68:bd:ea:fa:2e:90:a6:6a:cd:90:19:3f:c2:55:
64:c4:81:73:19:f0:8e:a3:f4:57:11:30:d0:49:88:
1d:b4:92:dd:76:b0:e1:b1:2f:45:40:65:96:6d:66:
b3:89:6d:83:d2:76:72:41:ac:40:d1:b7:c1:d7:59:
ed:f9:13:85:4b:f0:76:74:cb:88:9e:b1:4e:c1:8f:
8a:99:77:52:e1:e0:03:d4:0d:7a:1a:ea:5e:53:eb:
91:3a:00:20:3b:eb:02:a6:4d:b1:ca:80:af:7b:f0:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:0A:A2:A9:09:C9:4A:E0:BE:21:51:A4:41:84:62:6F:4C:52:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15e3a99d-0bb5-3cf4-90a4-64eccb8c306d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:61:98:70:dd:78:93:57:10:98:35:ab:11:8b:c5:2b:cf:d7:
94:f3:a8:7e:b6:1e:22:ea:00:3e:4b:4d:37:79:94:66:37:33:
d1:06:ad:10:f4:47:ca:02:0a:19:10:53:67:b6:9c:47:35:3e:
55:41:9a:5c:bb:c4:a8:97:37:f2:6d:ca:1e:9f:1c:a6:7e:d3:
4f:f1:84:15:da:e9:cb:e0:72:2b:b1:a5:1d:73:7c:2f:0e:7c:
ea:34:2f:b5:09:97:be:22:36:3e:63:f1:60:7f:4d:14:8f:c9:
92:49:6f:03:03:73:8f:11:63:02:34:5a:82:7d:8e:f5:86:f5:
c5:49:c8:00:e2:76:e5:a7:21:0f:35:b4:7c:fc:f2:c9:85:a4:
65:ec:d4:d4:98:8b:5b:3e:ac:33:ac:4b:03:ce:7a:ed:9e:b1:
cf:0a:00:f0:0d:d1:0b:b0:90:4f:ad:d3:c2:df:ad:8f:6a:79:
68:b7:9a:5c:02:f4:03:9a:70:a0:b3:91:db:d5:db:48:c7:da:
f3:26:63:f6:98:3b:d6:31:46:ad:5f:ee:44:96:b3:4c:6e:ee:
ae:cc:e5:33:54:df:43:0d:4f:03:db:56:9f:07:46:66:e6:53:
06:68:89:3b:99:2a:3e:96:49:20:e5:db:52:d8:de:dc:7c:1f:
cb:b7:79:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:55:59 2025 by rpki-client