Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa
File: 1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa (raw, json)
Hash identifier: dvdr8SwBragJYn5czMsOXXGzBdubgiXT3n0vWMzwMI0=
Subject key identifier: 19:04:3F:00:F7:25:D5:CA:B9:AF:4B:35:A6:CD:17:9B:52:9B:7B:80
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858484EDAD1E90D3C85DCEF5A0300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 40263
IP address blocks: 2001:470:32b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:d1:e9:0d:3c:85:dc:ef:5a:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=c995239a-af5b-4c17-bbe8-c3756a9a5012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:e0:2b:c0:47:4d:f1:f8:f0:ac:5c:e4:f7:
40:41:97:2b:cf:e6:a2:29:d2:d3:0d:c1:af:4e:0e:
8a:d9:12:e2:ad:c0:b4:10:26:2b:cd:51:d8:c7:2a:
39:bf:bb:8a:27:70:2b:7d:6b:22:2d:ad:a6:2c:b0:
5b:88:25:d8:3c:13:ba:fc:4a:26:88:0b:00:75:f2:
dc:33:08:35:0e:00:fd:20:4b:b8:46:28:76:2f:6b:
a0:ad:b9:f9:a4:26:c6:5c:17:ef:58:64:82:4d:13:
98:7d:22:47:aa:99:82:fd:d0:59:e6:5e:fb:05:f3:
9b:bc:f7:2d:c5:9c:89:5d:36:b4:f7:93:63:15:9a:
02:3a:d7:a7:b3:39:41:b8:fd:45:ad:1e:a7:d3:1b:
fd:7d:11:ea:5e:34:09:ad:46:37:e7:f2:06:d1:83:
1d:df:07:bd:aa:ea:d3:69:07:65:c8:67:13:f3:79:
e8:d6:4a:ed:8b:5e:07:8d:b4:7a:4b:bb:62:bc:29:
5e:d1:34:3a:bc:5f:4a:4b:6f:a1:66:63:c4:f7:07:
6b:44:ce:4e:ee:3b:05:c7:9e:e4:bf:38:ae:ab:61:
e7:aa:c5:0c:8f:27:17:02:80:27:fd:f5:06:e2:e5:
ee:a1:15:25:83:c1:5f:e3:73:ba:46:1e:cc:82:44:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:3F:00:F7:25:D5:CA:B9:AF:4B:35:A6:CD:17:9B:52:9B:7B:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:32b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:6f:86:47:d2:f1:23:cc:60:7c:d0:95:c1:b1:e0:78:08:88:
eb:6f:5f:af:cf:f4:e3:b2:c0:db:62:1b:ae:38:d5:66:f1:df:
d9:d8:97:4e:57:ea:d5:c8:57:c9:1b:8e:d5:95:4d:c5:fe:e3:
99:78:fa:1f:8c:40:c3:1e:73:35:01:ae:84:c5:ca:55:f9:9e:
84:29:ac:b9:57:ae:e8:75:b9:97:d1:9e:ca:6e:e7:8f:c2:59:
ff:50:c5:93:eb:47:c9:c4:a3:b8:6e:65:7f:a3:46:3a:5f:42:
0f:d0:58:47:0e:5c:e4:ce:c9:0a:dd:17:37:b3:f9:cd:be:5d:
e8:d2:0a:74:21:1a:87:67:49:40:39:97:03:34:76:9b:b6:5e:
ac:1a:ee:42:66:4d:c4:df:28:a8:e5:9f:81:10:ff:7a:2c:22:
d0:90:6f:4e:32:05:4a:50:02:20:43:d2:90:ba:e8:f7:ae:9d:
68:94:56:94:98:10:ea:e3:9f:1e:64:73:89:02:5b:be:a1:53:
37:6b:e4:bd:11:dc:c8:84:0c:5e:2a:f6:5e:20:e8:c8:cf:76:
f0:06:3a:77:b4:1d:02:1b:8f:d1:24:a2:91:51:3e:cb:47:bd:
aa:e8:10:38:ed:a9:5b:ea:b2:93:3b:25:e2:33:3b:e9:0e:90:
09:a0:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:24:05 2025 by rpki-client