Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa
File: 211e541b-a489-3085-9583-5ef6d8a55b16.roa (raw, json)
Hash identifier: 3Vb/DxB9dNzthJaj0HSCgUcY0XtoIaiQJKzc2k1lZYM=
Subject key identifier: E2:0E:8A:4D:F3:3C:D8:5D:2B:03:0B:7D:B5:24:23:73:C5:DC:63:5A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848748B22C17DE7A6FBA2960380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 43957
IP address blocks: 2001:470:34a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:22:c1:7d:e7:a6:fb:a2:96:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=d9772998-61f0-4389-a16f-8d7c0c4e355e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:b5:f6:7f:37:8b:af:e6:f3:53:b1:5c:da:
2b:f5:3e:b5:33:5c:7e:3c:7e:cd:5d:32:51:a0:66:
78:62:0d:b2:72:20:e8:f7:c8:c9:4c:ee:84:40:19:
78:aa:67:b3:00:47:c3:f1:dc:e0:1d:fd:29:29:dd:
1d:b0:bf:2d:ff:cc:d8:c2:a4:73:61:01:ff:06:6d:
c6:79:19:6a:1e:95:11:d8:ea:6e:1c:a5:5a:8d:1c:
6e:0f:09:37:00:ee:d1:cd:37:8a:fc:53:49:52:74:
0a:f9:dc:be:a2:eb:2c:58:06:6c:e6:ce:63:04:19:
e1:e5:3c:11:6c:0c:b7:6b:ce:97:9c:88:49:aa:35:
c5:df:65:63:a1:fb:eb:d8:83:9b:aa:9a:97:1e:4c:
66:eb:50:55:d0:79:25:a0:86:46:66:e4:41:0b:99:
91:d6:6d:18:f0:7d:6c:0e:c5:0d:1b:08:3f:1c:69:
8b:91:7c:26:b6:7b:6a:8e:c7:0f:fb:66:6f:60:70:
34:c8:89:b2:31:0e:b5:39:d4:99:5d:c7:67:12:2e:
e2:f5:78:a4:e9:c5:ce:29:21:2c:bc:28:ae:fe:ae:
1e:38:d6:0c:b4:aa:f9:f3:89:46:e3:2a:23:dc:56:
eb:ec:89:45:0c:b5:f2:49:28:89:65:a9:d4:60:62:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0E:8A:4D:F3:3C:D8:5D:2B:03:0B:7D:B5:24:23:73:C5:DC:63:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:34a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:ed:a2:d4:05:71:9f:bd:1d:1f:8d:9e:c1:a9:02:93:03:f2:
f5:97:09:0a:e2:91:dc:53:a8:a7:2f:d4:5b:1a:76:25:1b:12:
7b:16:67:79:62:e0:af:f0:c5:45:76:71:0d:cb:86:68:a7:ad:
b6:65:b5:7b:0e:18:6f:03:17:e5:ea:5e:ec:6d:55:e9:f9:4a:
f9:73:4c:75:5b:2a:21:ea:e6:5e:ea:6e:c4:bf:6f:e1:16:4a:
7c:7b:05:46:ee:d8:9f:63:f0:c4:28:6e:78:cf:db:a9:dc:f3:
76:34:e2:58:1c:b1:59:19:63:f0:c2:33:8e:53:10:c3:f3:37:
90:92:8d:3f:a0:01:88:48:d7:b1:90:ff:e0:12:f7:fe:05:52:
e8:a5:77:6c:1c:c7:01:f5:5b:67:e2:eb:a6:50:8c:d1:3d:bb:
cb:5b:e4:4f:3b:e9:be:da:e3:d8:3a:fd:96:a6:e6:01:b6:90:
6b:b4:44:2b:31:c7:c6:59:c5:a4:50:08:38:78:43:89:b2:dc:
b7:b2:bd:85:1a:7d:d2:86:63:bb:86:91:58:84:09:ae:1c:52:
98:f5:28:b9:97:3c:61:9b:74:ab:e5:93:37:9b:73:60:6b:a0:
12:dc:d0:47:5b:0a:60:a9:f4:2e:40:cb:c1:02:89:de:64:c8:
56:39:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:27 2025 by rpki-client