Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/187340f2-ddf4-3c87-b9e0-82d01ece50be.roa
File: 187340f2-ddf4-3c87-b9e0-82d01ece50be.roa (raw, json)
Hash identifier: Xkw7nFNpFv70xshiY6DqmAJYtSjLo0TwGlGeUbb900E=
Subject key identifier: C1:7B:16:DD:38:43:E9:40:6E:DD:7D:D9:D5:55:E0:24:C6:63:CB:F4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFD63AF35A76FA3DF8520
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/187340f2-ddf4-3c87-b9e0-82d01ece50be.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 397005
IP address blocks: 2001:470:24d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fd:63:af:35:a7:6f:a3:df:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=aa446aed-3248-47cb-8b9c-9fcfdbc7ac57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:45:cd:47:4d:4a:83:7b:40:de:f1:c2:29:
e7:2c:60:2c:05:d5:a0:2b:af:90:c6:41:9a:31:34:
b0:74:ba:0e:75:fd:de:58:1b:6b:33:aa:6a:51:ca:
23:4b:88:b7:3d:2f:e6:d5:b0:59:71:5c:70:36:56:
07:6f:27:6b:dd:29:b0:bb:8b:3d:ef:78:87:04:35:
74:c9:83:fc:fa:bb:a7:e2:6d:b1:c1:ee:43:83:63:
ee:ea:ac:c3:50:b2:bf:37:17:2b:a8:d1:a9:c1:40:
26:d9:51:c1:f4:e4:f4:b0:5c:b5:26:2b:47:43:5f:
76:51:02:e3:8a:18:63:31:d1:18:94:a7:03:53:e3:
65:8f:f9:e3:9b:58:2f:e4:18:bd:45:c8:c5:69:0a:
d0:34:85:92:a9:fd:9c:08:1e:bd:aa:d6:7f:6a:2a:
51:21:17:7a:6f:f3:c7:10:dd:93:17:9d:8b:40:e8:
f8:6a:8f:72:91:c1:6a:3b:19:fa:3a:6b:83:89:54:
cf:7d:47:45:1b:66:6f:62:cd:96:db:56:18:e8:2e:
88:82:a0:a5:f7:91:84:ec:f6:06:32:33:82:54:5a:
44:24:aa:52:95:73:9e:13:e4:89:34:08:79:c4:0c:
c1:0b:30:fe:cb:54:ac:e5:45:7e:83:00:74:91:4c:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:16:DD:38:43:E9:40:6E:DD:7D:D9:D5:55:E0:24:C6:63:CB:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/187340f2-ddf4-3c87-b9e0-82d01ece50be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:24d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:0d:d1:3a:30:6e:7b:5b:73:de:ae:35:9e:41:09:f3:de:ef:
aa:16:6f:20:dc:fb:c6:a2:11:46:dc:ea:11:03:23:14:ac:f9:
59:04:45:09:cf:dc:ab:c8:b9:09:36:44:b7:2c:2a:41:90:49:
70:34:1a:60:ea:2e:c3:3f:9f:b8:3f:86:02:10:50:11:3f:ab:
f2:6a:37:75:6a:e3:f7:c3:49:43:a2:c8:e3:34:46:f7:93:14:
53:15:aa:38:b1:68:a8:14:9f:25:d5:50:62:a6:1b:c4:1d:e1:
fa:07:c8:8d:cb:3c:df:4f:0c:18:d4:44:a5:1a:ab:0f:61:9c:
a5:dd:76:5f:2e:5d:dd:44:f9:e7:41:c4:be:dc:fb:74:83:c4:
37:7e:af:1a:22:b4:ca:30:1d:94:a8:ad:64:19:4c:56:05:0a:
f1:65:29:60:2b:69:c6:a9:90:b1:3a:80:43:6a:5b:a2:17:48:
57:3b:f4:0a:c0:3b:dd:f6:96:82:72:22:8c:7b:b1:b0:14:36:
60:02:dd:8b:64:c4:98:1f:82:67:f7:51:09:46:08:20:17:1d:
04:d7:aa:40:b4:03:22:74:af:65:86:46:19:8e:6d:ea:6a:34:
24:14:43:64:48:36:7f:c6:c6:7d:85:de:d3:13:a2:ad:21:52:
4e:7b:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:05 2025 by rpki-client