Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db3826e-eb81-3da9-9011-f5afe98f5782.roa
File: 2db3826e-eb81-3da9-9011-f5afe98f5782.roa (raw, json)
Hash identifier: Xy/qZfhXr7xe+KNcHXtk2GYcfN6NBKt6pM+FRzgM4c4=
Subject key identifier: A9:86:98:7F:24:AB:0D:9C:43:F7:82:FA:D2:19:D2:FB:17:F9:7F:65
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D012AB4B368E5DBC207900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db3826e-eb81-3da9-9011-f5afe98f5782.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 40029
IP address blocks: 2001:470:185::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:12:ab:4b:36:8e:5d:bc:20:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=217201f7-be38-4a97-b81b-35da6a4fb29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:3d:da:bb:b6:c5:ef:c0:71:4e:0b:31:b7:
13:2a:3c:19:58:15:2f:fa:6b:98:41:07:5a:0c:6e:
f6:aa:4d:b4:7c:83:55:a9:02:f6:e8:56:4f:e2:aa:
0f:97:70:49:23:af:22:f7:7f:8a:65:f0:36:1e:c5:
70:41:fa:67:b0:d8:58:fe:30:ce:2f:06:8b:b4:e6:
fd:3c:77:d1:f5:d0:9d:d5:9c:9e:57:f4:70:a9:89:
1d:dc:73:86:74:2d:ac:84:83:7a:3a:85:cb:41:57:
ff:d2:b9:f0:8e:5e:03:67:d6:c5:a5:71:7b:2b:0e:
c0:85:8b:77:ae:40:bd:90:63:25:85:c0:dc:9f:6d:
2a:94:73:49:51:33:40:0c:31:d7:88:ef:e9:b9:78:
65:a9:47:23:a0:79:e6:1a:f6:b9:37:d5:da:17:d8:
bc:83:54:45:f5:25:38:7a:db:5b:5b:d2:a9:61:d8:
96:95:7c:e3:24:43:c4:de:79:c1:4c:1f:ea:aa:99:
79:8c:6c:e8:b9:a7:b7:bc:dd:9f:c2:31:cd:00:c2:
92:bc:a0:bd:08:4f:3f:26:68:56:71:7b:a4:5a:e3:
0c:b8:48:81:79:07:9c:ed:71:53:b6:8e:e1:a1:b4:
ce:0d:64:97:22:0b:c0:e6:15:f5:3b:b7:71:3c:6c:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:86:98:7F:24:AB:0D:9C:43:F7:82:FA:D2:19:D2:FB:17:F9:7F:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db3826e-eb81-3da9-9011-f5afe98f5782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:185::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:f4:f7:7b:ec:4d:98:f8:2a:2a:88:fc:95:e4:48:5a:84:7f:
8d:72:e7:11:db:b4:5d:2c:89:b7:45:07:71:c8:1b:fa:bf:18:
e1:71:1c:dd:55:cc:74:14:98:e3:1c:af:c6:a8:27:df:d3:b4:
44:31:e3:9a:ba:8e:28:b4:fc:eb:58:06:15:93:b8:12:96:da:
23:f6:4c:c2:40:28:db:21:1d:ea:50:23:e7:fc:21:39:c1:ff:
91:b0:4b:94:cf:d4:3a:52:d0:a6:23:42:01:b6:24:38:bd:4d:
a6:b8:ff:21:31:3e:44:dd:b1:b6:f0:4d:c8:41:f3:6d:35:1a:
3b:63:3e:92:61:1b:2b:43:79:b4:1b:b1:a5:4e:3a:50:b9:10:
66:19:5a:bc:f8:9b:c2:7c:60:58:41:5c:3e:27:08:2f:db:ed:
43:fc:d5:bd:73:1a:7f:49:55:81:50:fa:8b:f0:d0:9b:92:4c:
46:0a:ce:cb:a9:e6:35:69:9a:27:3d:63:f4:5e:b2:79:6b:64:
df:9d:0b:c2:9d:ae:b2:9c:23:95:a0:01:13:38:30:99:85:ef:
62:a8:ea:4f:62:b0:4b:e4:34:51:9d:c6:1c:61:86:0f:2d:4e:
23:7b:ed:96:c1:98:49:20:58:bc:2b:e9:e0:7b:01:5a:87:a4:
c1:38:86:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:48:06 2025 by rpki-client