Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa
File: 29900e27-cebd-3cf2-9435-565d3b774e22.roa (raw, json)
Hash identifier: kUIWac+bBCA2kJFxQhZzD2UvRNaVYx8XUxkQ4bJNzYE=
Subject key identifier: 8A:8F:8E:96:EC:2F:D2:C9:29:E8:B2:1D:7D:A0:C1:D4:D5:27:51:56
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF8A563A47CE8B07C6440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36012
IP address blocks: 2001:470:1a8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f8:a5:63:a4:7c:e8:b0:7c:64:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=bf5a191f-feb6-4c8f-9117-5506a39c5b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:e1:02:99:61:ea:5b:ed:a3:5d:08:96:18:
d3:6a:1e:1c:2f:3e:ea:9a:9a:0c:33:1e:67:a9:fd:
c0:ee:e1:75:6c:02:dd:30:8c:6a:d2:30:df:92:61:
93:25:7c:74:d1:1d:50:99:b4:28:0a:c1:b4:a3:46:
56:84:99:fe:89:15:06:61:95:92:28:67:1c:4a:2d:
9b:d3:ff:92:c5:10:b8:06:fc:d2:0f:17:13:4c:b9:
4e:94:b0:df:03:7c:7c:bd:52:31:3c:3d:cc:f9:40:
c6:91:0f:b4:09:f9:8e:e8:f3:ea:df:ab:40:a5:d6:
df:38:f4:28:a5:fa:1e:c8:e8:2b:8d:9c:f2:d0:1c:
90:a2:37:c4:e5:21:f5:3f:af:3e:42:7b:24:f6:ad:
a5:41:8d:d4:0a:f0:d2:f4:75:fc:10:18:35:31:6a:
54:08:f1:f3:43:f5:3b:13:91:cf:27:40:32:04:6c:
1e:a4:ae:36:1d:b9:d3:17:89:39:d0:9f:73:92:b4:
82:4f:c0:54:6c:90:47:a5:87:a9:c6:41:4a:b9:8c:
3a:4e:fb:1d:da:32:84:80:3c:00:f8:1f:75:16:52:
7d:dd:b4:6e:10:ed:bf:e6:c5:96:92:f3:39:24:8c:
2d:d4:b1:cc:79:84:a0:92:5c:ee:83:a0:08:7e:ee:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8F:8E:96:EC:2F:D2:C9:29:E8:B2:1D:7D:A0:C1:D4:D5:27:51:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1a8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:11:a5:79:f6:c1:0c:5f:b5:a3:55:8a:27:80:ca:f1:38:d6:
a7:fa:48:f6:bd:39:64:aa:32:5f:8b:51:e3:dc:8a:6d:08:90:
85:13:16:11:53:ca:97:81:ee:30:42:7c:28:4a:cd:ec:c4:c2:
f6:d4:85:c0:9f:f1:a2:16:c6:5e:07:ad:0e:51:1f:60:1d:01:
f6:30:eb:41:eb:b7:de:e9:00:5c:7a:b1:2c:9c:d5:52:2f:e8:
1b:ce:42:7c:b5:21:c1:ce:d4:4d:01:34:6c:c6:7f:95:11:2f:
0b:9f:4b:9d:27:76:98:95:0b:8e:25:06:db:0b:e0:7b:72:d8:
c2:ec:f8:2a:d1:a9:44:2c:8c:46:cc:e7:58:d6:33:6a:43:fe:
a9:86:93:82:b9:33:ac:08:44:83:8f:cb:42:90:73:53:63:03:
c0:8c:da:56:d0:c2:36:5d:b8:df:d3:b2:26:b0:c3:8b:33:c8:
c7:db:a0:74:a1:b4:69:ec:50:c6:cb:5d:2a:dd:b1:82:4f:55:
32:9c:b8:b8:b0:1c:2e:2d:ea:3d:11:15:78:e0:b0:db:ea:9a:
f4:1a:02:32:13:62:af:54:d0:f1:7c:39:d7:e6:ac:13:77:b9:
df:d0:21:c1:3d:02:9d:be:3b:ee:0b:6d:30:11:d5:ea:b0:47:
93:86:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:04 2025 by rpki-client