Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29caab9c-d01e-3552-aaf0-b4c9e6629b52.roa
File: 29caab9c-d01e-3552-aaf0-b4c9e6629b52.roa (raw, json)
Hash identifier: nfeRIEvHDqyIH9/SWZ9t4xJvayux76tybhqIIyDnT2s=
Subject key identifier: 07:AC:19:71:3F:26:59:F6:16:D2:7D:18:C8:25:FD:B0:66:36:02:E8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFA5E1A9963271BD53900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29caab9c-d01e-3552-aaf0-b4c9e6629b52.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 3855
IP address blocks: 2001:470:1cb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fa:5e:1a:99:63:27:1b:d5:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=bf8a78ce-69ef-4e44-b933-c82bb0285f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:d3:aa:02:45:c7:de:57:59:92:00:5f:03:
7f:d4:2d:32:85:d5:b9:68:a3:93:43:02:69:95:d6:
9c:17:e5:6d:ae:27:c0:16:55:b0:be:0b:37:32:ae:
10:06:64:9f:1d:65:da:a0:b2:bb:4a:da:c2:33:02:
f7:07:38:82:f5:2e:fa:67:69:c7:76:16:78:3c:a5:
2c:55:3a:66:86:3a:fc:66:16:44:4d:1b:0f:2c:45:
fa:16:ab:93:c8:ab:dc:2b:16:3c:f1:e9:25:c9:e5:
c6:b4:5b:66:5d:64:e4:43:d2:9f:e2:eb:d4:ab:4d:
e9:28:a0:30:08:c2:dc:e8:cf:9e:56:09:33:5c:ed:
7b:8b:bf:cb:e7:08:79:29:41:74:7b:46:18:b2:0b:
51:d2:2d:e6:9b:9b:ab:eb:d0:13:10:af:31:ec:69:
99:fd:fc:fb:54:56:4e:0f:45:dc:31:24:f2:9d:67:
11:2e:5c:e5:f4:28:4d:3b:7f:81:1a:0f:15:53:08:
5d:16:84:2f:eb:5a:ec:18:05:f5:6c:7b:ef:28:28:
f7:18:d3:6b:94:4c:ec:f4:a8:1c:06:9e:80:07:de:
c7:07:02:17:05:aa:51:d9:d0:fa:45:a8:ce:ef:5f:
20:0c:97:e7:d5:f4:5b:57:2e:2b:de:6c:24:db:19:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:19:71:3F:26:59:F6:16:D2:7D:18:C8:25:FD:B0:66:36:02:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29caab9c-d01e-3552-aaf0-b4c9e6629b52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1cb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:f1:d1:fd:ae:4b:56:4f:6d:d0:61:ee:8d:42:b6:c6:c0:4d:
25:74:8a:92:c4:5f:f4:a8:82:ce:99:6c:92:d8:4a:62:98:49:
89:e9:df:b1:96:86:b1:f6:92:cf:08:11:e2:5b:fa:ae:01:cd:
a0:1b:da:c8:42:1a:01:56:8e:62:3e:14:8e:3d:49:df:b4:14:
e7:b2:d9:bf:e3:28:77:ee:01:a2:b7:37:96:75:17:d9:73:46:
bb:78:45:b8:bc:b3:ac:59:de:21:90:e5:b6:d0:c7:bb:ad:46:
f1:03:94:79:49:24:a5:21:21:ae:e0:77:4e:e9:22:a0:40:5a:
d3:7f:a2:22:a3:44:c8:57:24:ae:60:0b:98:2e:69:7e:1e:b3:
2d:8f:8b:fc:53:a1:9d:f9:25:bf:4b:20:b0:b3:87:6d:9b:82:
ff:41:64:9a:7c:f5:24:84:e6:cf:ed:47:70:c9:bb:9b:a0:a1:
8e:56:a0:7e:53:9f:d5:23:ed:d4:66:82:3f:2c:93:31:0c:c9:
f6:b2:40:ea:9d:c2:bc:a6:7c:6c:c5:e5:43:a6:af:0d:65:f5:
1a:7d:a5:83:35:27:a3:c4:7e:cd:af:ec:fb:80:a0:02:38:a3:
1e:15:c7:8d:d5:0d:85:65:83:56:32:4c:c1:89:8d:99:1b:b2:
a7:13:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:34:53 2025 by rpki-client