Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
File: 2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa (raw, json)
Hash identifier: Ga9eA0SrHH329RmRolme6/y0Bd4YH3FUpzx7TDVKNVU=
Subject key identifier: 50:54:FC:5C:1F:A0:91:2F:72:0C:ED:B0:13:2A:D8:FA:D8:94:73:DB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01D895664B1D0DD876C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 43525
IP address blocks: 2001:470:2a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1d:89:56:64:b1:d0:dd:87:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=b6a53fce-b302-4b65-818f-e06a9a4b4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:22:12:c4:69:d0:bc:c1:0a:07:e7:64:9f:
0d:03:3c:90:f5:05:6e:4e:d8:de:c1:d2:41:5c:b2:
6d:67:94:6b:b3:7e:e6:2f:0f:61:90:25:1c:04:af:
72:60:6e:01:0d:28:94:0e:5b:70:e9:17:6b:c9:ad:
db:6b:8b:b9:54:65:38:56:ff:3d:15:82:f7:18:77:
06:a3:76:40:5d:e2:81:57:d2:b6:1b:2d:2d:82:c8:
61:7b:9a:d2:64:f6:d6:23:40:4a:e0:55:89:6a:13:
17:6d:08:87:b4:3e:e3:ba:d7:8c:31:6a:74:58:f9:
72:09:65:92:dc:04:2a:5f:14:d2:d8:a0:fb:5c:69:
08:fa:3d:cb:87:13:21:32:5b:ce:53:b4:96:48:16:
ad:7b:b9:a4:5d:19:9c:dd:49:13:dc:cc:30:15:5e:
c2:43:31:80:12:9f:a0:a4:18:b9:8f:29:fc:e4:83:
9c:0c:7c:72:f1:7a:d7:b0:3b:be:a8:5b:8c:95:f6:
61:5b:1a:b9:39:02:c0:08:10:7b:42:f1:e6:3d:32:
f7:05:dc:3c:9d:f5:25:e5:19:6b:6c:8b:9c:45:4b:
1f:43:db:76:0e:56:0d:5e:79:54:fb:4c:73:72:24:
7c:ac:8d:e0:9b:ec:61:3f:4a:78:0a:37:bd:c3:d5:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:54:FC:5C:1F:A0:91:2F:72:0C:ED:B0:13:2A:D8:FA:D8:94:73:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c1:db:bd:15:bd:90:eb:e9:66:e0:b2:a9:a9:52:1f:c7:05:
7e:50:8a:68:54:86:18:a3:b8:11:d2:e1:26:1a:5d:c5:0b:10:
61:ce:93:40:b4:aa:cd:63:94:90:46:d3:d6:3d:c2:11:54:c5:
bc:8a:40:23:56:aa:28:36:34:07:57:af:df:a5:d2:7c:ce:50:
37:38:5e:b8:cd:67:27:2b:53:a3:c6:0e:16:e6:98:4e:47:74:
4b:db:9b:9c:4b:12:8b:fe:15:d4:c8:e8:e5:5e:ae:11:67:9d:
37:38:79:1d:0f:42:fe:e6:7a:a5:3a:a6:b4:0a:d4:13:ab:3f:
e9:b8:0d:10:29:1b:0b:b5:34:01:8d:e9:88:15:53:61:1c:43:
a0:3d:dc:fd:8a:3c:23:90:78:32:09:ab:36:52:bc:c7:30:fe:
fd:66:e3:90:cd:5f:bf:9a:60:78:b4:60:8d:b8:69:9c:fc:d6:
13:88:77:0b:3d:03:8f:ac:7d:7f:19:ed:62:24:e5:b8:5f:e9:
8b:58:b8:6a:96:30:1a:f9:01:ef:83:c2:71:6c:65:d0:e6:45:
e8:ca:6a:af:b4:bf:48:e3:79:55:31:48:d0:b9:8e:8a:9c:d1:
28:10:b3:7f:93:80:ec:0c:ae:66:07:1b:64:09:7b:06:39:1b:
6f:96:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:47 2025 by rpki-client