Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2133cab2-2890-3cd0-9194-be449b9dafec.roa
File: 2133cab2-2890-3cd0-9194-be449b9dafec.roa (raw, json)
Hash identifier: SJE308Z3iqrRSqXc2ynPUBzzrn+eFzWFoopcWwb4u7Q=
Subject key identifier: B3:50:A6:C5:B3:19:42:17:4B:89:4E:62:C5:53:61:96:5B:C0:7E:9E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584815A002E85D9B3355D8E65300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2133cab2-2890-3cd0-9194-be449b9dafec.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 133380
IP address blocks: 2001:470:326::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:a0:02:e8:5d:9b:33:55:d8:e6:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=256f5818-9a67-4067-a085-148db75a9ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:23:6d:73:1f:30:68:8a:41:95:d3:3d:d7:
bf:2c:ae:f8:7e:a8:d6:5c:39:ea:1e:29:cb:c9:8b:
50:16:87:58:74:fc:bd:e1:6a:15:78:27:07:3d:86:
0e:96:2d:fc:9a:7d:b5:bd:f3:1f:cf:09:b4:0e:9f:
84:63:fe:cb:f5:85:91:6d:16:67:24:b3:77:6e:48:
0a:1d:4f:78:1b:fd:d8:28:33:42:06:fa:23:1b:3a:
b7:21:ea:e5:94:e6:99:c3:72:fd:07:9d:c1:d4:23:
eb:e3:3f:38:74:c7:6c:7d:eb:18:8c:c1:d8:dc:93:
18:9f:0f:0c:4f:0d:ac:fd:51:ce:57:e6:8d:28:70:
5e:5c:09:28:d5:1a:bc:bc:f1:d8:3d:d7:8d:cb:ba:
68:b8:5b:48:ed:31:1b:87:c6:e1:30:c9:3a:28:89:
53:fb:4c:f5:3b:29:0a:9b:08:bf:e5:3b:91:18:dd:
a0:e7:42:b6:bb:d5:7b:b8:05:2c:b7:d2:40:c4:1e:
8a:ce:c2:60:ed:78:d0:25:f5:d5:2b:48:bc:29:07:
42:b5:29:94:c4:13:35:db:6a:9b:7d:9b:d3:c6:90:
65:3f:05:6f:a0:af:70:56:b9:2f:61:02:b8:35:5b:
34:03:e6:45:58:b2:7c:cd:b6:de:5d:12:83:73:2f:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:50:A6:C5:B3:19:42:17:4B:89:4E:62:C5:53:61:96:5B:C0:7E:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2133cab2-2890-3cd0-9194-be449b9dafec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:326::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:de:c9:bc:fb:8e:93:01:aa:48:e8:eb:b1:38:57:5b:be:17:
32:31:df:e6:a2:83:00:be:11:4f:64:b4:c2:60:13:d8:0a:02:
a2:05:e8:92:b9:a1:b5:3d:eb:0d:d6:fd:7e:a3:a1:5b:c4:53:
4e:10:a8:27:37:2b:ce:30:ac:ef:9c:3e:16:b5:8c:18:fa:bf:
8a:f8:7d:fd:0c:ed:d7:a2:07:04:e4:87:fe:be:dd:7a:48:af:
b9:0e:33:eb:0a:68:a3:39:d2:ce:24:19:31:b5:42:13:39:d7:
50:42:3b:e0:59:4b:dc:1e:1d:21:46:d0:2f:2f:7e:61:d5:73:
16:8b:2c:e0:38:6c:e0:12:b2:d4:a8:a1:2b:40:d1:1b:0b:4d:
0b:1d:44:21:30:0c:57:a8:de:40:a2:1e:6d:f7:a8:00:38:76:
6e:1b:d5:b5:af:81:ce:00:48:b9:59:b9:87:14:07:8e:9e:3d:
52:80:5c:22:b6:17:6f:8b:bc:bc:35:b9:2d:13:76:42:43:fd:
2b:5b:0d:37:d5:94:3f:41:84:fb:32:d9:66:01:eb:90:20:8c:
04:ae:0e:0a:ea:33:73:2b:05:a3:37:5a:5a:3e:b1:61:74:9b:
1f:54:0a:5a:ac:b2:3c:2d:76:19:5e:81:b6:31:df:67:89:2e:
9f:4b:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:59:04 2025 by rpki-client