Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ad02c58-a153-39b5-b41a-acc0faf6fa4b.roa
File: 1ad02c58-a153-39b5-b41a-acc0faf6fa4b.roa (raw, json)
Hash identifier: wWRcHfDhgOOYeBl5X8Rgkr8NkCCOHjbWINLFLRD4T0M=
Subject key identifier: C0:63:DD:BD:97:BF:6D:8C:B1:4F:CA:F8:CA:21:C9:85:88:D4:5D:AC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01AD629E89ECFFF598180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ad02c58-a153-39b5-b41a-acc0faf6fa4b.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 203760
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1a:d6:29:e8:9e:cf:ff:59:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=346c3c12-4a53-4876-a325-464821d3768f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:d5:19:21:ce:8c:95:69:f1:03:35:cd:c7:
ad:13:1c:6b:65:6f:2d:e2:43:6d:df:7a:7d:9d:4c:
29:55:66:82:03:21:f0:50:91:9c:f9:00:ce:0d:a6:
fb:0c:f8:c6:a3:d0:ce:6a:ab:3c:2e:cc:c6:4a:33:
ba:0f:95:02:86:a6:a4:50:00:bf:12:16:ec:9e:97:
aa:f8:cd:15:f4:2f:18:dd:a4:03:a3:0e:98:07:30:
e2:2d:54:72:b3:6a:b0:8c:fa:86:90:54:fa:5a:60:
64:d0:69:79:4e:21:2e:27:56:b2:28:e2:11:1b:f8:
77:69:6e:03:3c:de:6a:da:87:b6:a3:13:94:90:ad:
00:c8:bd:f7:55:06:83:b4:78:71:d5:0e:2a:12:7a:
27:67:5a:f1:da:51:78:ef:ef:8e:10:b4:19:7f:7d:
a5:f5:58:4f:d8:42:dd:82:24:01:3e:e2:a6:82:a0:
7d:60:70:09:77:dd:95:88:a1:51:7e:8e:df:a7:2d:
36:fb:98:a3:4e:77:a2:45:1a:aa:bb:01:d3:8f:6a:
0b:1c:9f:50:da:2b:f9:95:b2:52:97:b1:29:45:30:
6d:d1:03:88:cf:9d:77:4c:b3:4f:4b:c4:e5:3d:41:
3d:c9:33:f4:7f:12:08:15:04:57:72:ac:8b:b2:41:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:DD:BD:97:BF:6D:8C:B1:4F:CA:F8:CA:21:C9:85:88:D4:5D:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ad02c58-a153-39b5-b41a-acc0faf6fa4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:9f:ca:06:bc:3e:9f:7f:54:59:fa:2f:20:6a:c4:4f:6d:36:
6e:37:f3:2c:7f:b1:e5:55:5a:19:68:4c:c0:4b:b2:6a:8e:09:
00:f3:3d:2a:32:33:89:2c:e0:d9:d1:b3:aa:3c:a3:2f:2d:90:
a2:1b:80:de:20:61:82:2e:23:c4:e6:bc:76:74:e0:f3:2b:58:
96:66:1e:e5:2d:ef:0f:33:68:9e:1e:e3:12:15:d3:8c:f7:f4:
af:49:59:03:9c:c4:2b:a5:ba:b1:99:79:ca:53:bc:c9:ad:6a:
05:e3:4d:24:88:6a:02:fb:8c:21:75:80:e4:9f:d5:5c:4f:05:
66:d3:81:5d:0e:1d:08:80:0e:91:0d:2f:a7:6a:ca:a0:63:78:
07:bf:01:6b:17:63:04:6b:e0:cd:09:b3:87:4f:2a:29:c6:5a:
6a:ec:eb:1f:d7:ee:a5:aa:6c:40:ce:75:2a:91:cd:17:cc:0c:
57:c1:a7:41:37:b0:ff:ad:3d:da:0c:6b:99:cb:77:03:28:6c:
1f:b2:22:37:56:41:66:23:98:6b:89:1a:5f:a6:93:7a:17:5a:
0f:d8:fb:a7:64:ba:b7:39:68:79:b5:00:e5:56:53:ba:92:53:
65:a1:8a:3c:cf:10:b7:bb:22:39:11:3a:b2:78:cb:53:4c:8d:
8c:df:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:26 2025 by rpki-client