Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c0effc9-8c61-31b5-ae7d-cbe1ddc2e88e.roa
File: 1c0effc9-8c61-31b5-ae7d-cbe1ddc2e88e.roa (raw, json)
Hash identifier: uB/YbOEJhxMnoBgmFf1xrLuEYhAejT+MmhMSro/5qWM=
Subject key identifier: 5C:24:CB:85:20:8C:C6:73:9C:A0:30:90:88:8B:11:DC:C4:EB:B5:79
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848B1F62226E9BD39CA96BE1380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c0effc9-8c61-31b5-ae7d-cbe1ddc2e88e.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 45735
IP address blocks: 2001:470:3c3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:22:26:e9:bd:39:ca:96:be:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=ba8f5171-5d88-4a4f-b734-ece7de2d3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:bc:b3:d6:76:ca:b6:d2:ea:2e:2a:2e:1b:
5a:43:ac:58:08:57:82:55:31:6f:a2:bd:88:9d:35:
19:09:6e:3d:a4:2a:5c:f6:ef:af:37:5c:6d:32:b5:
c5:e1:a1:2e:b6:e4:ea:6b:b1:80:56:5e:bc:e9:2b:
07:10:da:b3:7a:9e:ad:49:77:97:fd:cf:2f:80:5d:
6e:c8:36:c2:c9:90:43:90:16:10:12:fc:80:ca:5a:
af:5d:2f:f4:fb:2d:e9:be:e6:e7:6e:73:17:a2:a1:
45:64:c0:08:cc:ed:ab:0f:8c:f6:f9:45:b9:54:c9:
f0:ba:58:55:88:7f:29:10:74:0b:8e:c1:ef:f1:4b:
16:8b:67:65:43:f7:95:0c:8a:44:18:d4:bf:66:94:
40:62:20:1b:c5:74:73:28:c8:d7:13:59:11:11:4c:
b1:69:52:1c:b5:c7:f1:e4:9d:6d:d2:30:3c:5a:25:
78:b6:18:ae:90:dc:09:c9:3f:82:17:2c:04:45:56:
ee:34:88:46:ab:26:80:fe:4e:71:02:5c:c7:a1:89:
7c:6a:9a:46:7f:19:80:99:46:eb:7b:be:50:91:61:
e9:f1:47:e2:c2:1f:32:a6:70:08:be:27:62:fb:12:
71:e5:37:74:af:17:b0:a0:d2:a6:ae:7d:ab:b4:e5:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:24:CB:85:20:8C:C6:73:9C:A0:30:90:88:8B:11:DC:C4:EB:B5:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c0effc9-8c61-31b5-ae7d-cbe1ddc2e88e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3c3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:8d:7b:68:a2:00:fb:10:b3:07:09:8c:f0:fc:ac:59:55:cb:
8e:69:75:bc:8b:93:c5:83:31:8e:b3:2a:8d:a5:e0:be:36:86:
3a:9e:7f:be:a2:a8:5c:84:c4:62:5a:40:8f:3a:4a:a0:b2:ad:
04:c3:a1:bc:c7:da:6c:25:3b:cd:68:78:90:cb:72:70:7f:d3:
fb:49:f5:02:b1:a7:0a:71:89:15:a1:20:85:98:b8:af:fa:d9:
cd:35:c2:be:6e:4a:eb:43:4c:aa:9a:4d:c4:dc:0d:ab:20:3f:
db:6d:99:d8:83:50:e9:6c:c2:0e:7a:27:00:9a:e0:71:48:29:
49:62:fa:8f:70:d9:ad:b8:72:e8:de:ab:9a:7a:2c:e4:80:1d:
fc:ca:91:a0:39:2b:4f:e6:68:4e:70:ef:e7:03:7b:a0:2f:21:
22:08:41:7e:34:2c:a2:08:8a:1b:98:88:5f:f3:fc:fd:4e:0a:
d3:eb:40:fa:80:4c:4e:88:83:5c:7e:1a:40:99:e0:32:44:67:
af:25:53:55:7c:bd:44:df:84:4f:f9:f2:ce:2c:05:87:0e:b9:
03:e1:4f:11:c6:d6:9e:2d:55:72:92:00:1f:85:c2:60:f3:4c:
a8:8d:fb:89:cc:d5:6f:9e:f5:e8:69:2a:4a:be:75:47:c9:b2:
af:0a:20:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:18 2025 by rpki-client