Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e4ad6a9-0daf-38d1-93f3-ebdf6b6f85e3.roa
File: 2e4ad6a9-0daf-38d1-93f3-ebdf6b6f85e3.roa (raw, json)
Hash identifier: Kh6APwWnVmvyhvvqxIudtufVvMjieIKNO+a0GOHz+pM=
Subject key identifier: 7D:75:F0:B4:CA:7C:5B:5F:29:87:E4:02:8E:31:53:C0:EF:8D:FD:52
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFC78FE2B94EC15AEA480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e4ad6a9-0daf-38d1-93f3-ebdf6b6f85e3.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 35688
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fc:78:fe:2b:94:ec:15:ae:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=7645afcc-ef67-400d-8d3f-1451925519da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:36:7f:c6:fc:75:74:88:95:d5:67:e6:48:
20:39:d1:ef:a7:7d:90:cc:81:e6:6f:db:fb:5e:15:
52:c3:f3:1c:df:c6:b5:a8:9d:a0:20:52:dc:a9:00:
9b:36:ef:f6:60:aa:f4:df:ba:07:1a:d1:bd:3e:ea:
5b:3b:d2:a2:90:0e:36:80:70:6e:9e:52:13:45:fe:
9a:cc:1e:44:c7:a3:01:83:17:c4:31:62:92:c2:48:
d7:98:02:1b:c0:70:5c:bd:87:2e:4b:bc:08:69:7f:
00:f0:79:69:7b:dd:7f:b1:29:27:29:ba:e3:2e:b8:
2b:6f:da:a6:0d:4b:b3:7c:47:27:1e:62:6c:89:fd:
48:8c:9c:d6:09:76:2b:56:c5:8b:4a:56:ba:fa:cb:
0f:ee:dd:9f:05:0c:12:14:a2:0b:8f:95:ef:f9:ca:
05:33:60:1d:8d:26:fd:94:27:bc:6a:db:24:d9:96:
c6:d9:93:7f:ed:7f:55:1e:a3:83:a3:2f:01:a8:78:
59:91:bd:ae:7c:5d:77:b5:9b:67:ed:7c:58:73:b9:
eb:32:48:5a:7e:11:21:40:d9:b3:64:7b:b1:c9:6f:
68:db:80:04:cd:f3:63:e9:af:6c:34:9f:04:48:01:
fa:19:c4:05:78:57:64:40:d0:eb:ca:58:67:a6:f5:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:75:F0:B4:CA:7C:5B:5F:29:87:E4:02:8E:31:53:C0:EF:8D:FD:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e4ad6a9-0daf-38d1-93f3-ebdf6b6f85e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:67:f3:19:1c:38:63:c2:dc:b7:c7:18:71:3b:08:6d:42:25:
dd:32:c4:51:e4:6c:94:24:4c:c7:05:6f:9b:91:c2:49:ec:80:
e0:ce:ee:c8:f7:1f:91:66:7d:ee:7d:61:c4:a3:b7:21:cd:66:
74:6f:a4:26:86:ca:cc:7f:52:52:28:5e:84:54:4e:8e:87:5f:
4c:19:39:25:9d:22:b5:2c:ac:f0:04:32:fe:5c:fd:0c:63:b8:
df:72:49:00:23:b9:9e:8d:4c:25:4d:1a:77:35:6e:61:63:91:
dd:c1:42:c5:19:eb:ea:22:5a:5c:9a:c6:24:37:40:d8:2e:15:
d2:13:28:f7:97:2a:e0:7c:1e:cd:73:00:60:b5:24:3c:15:5d:
b2:2e:b2:40:74:01:3f:1f:af:65:ef:87:f6:5c:53:7c:d7:ab:
ac:02:ed:f4:23:30:45:89:ce:28:fe:cc:4e:7a:39:25:30:0e:
9d:dd:6b:4f:5b:b5:64:27:b6:bd:20:c4:3e:cb:74:d2:05:b7:
be:40:99:80:6c:f1:d1:24:b5:5d:d8:11:2c:3e:05:26:e9:33:
bb:8d:bd:47:70:ef:58:81:89:24:56:53:79:8c:ea:34:56:81:
27:f6:a1:15:1b:e7:28:d6:10:37:37:8d:00:39:1a:0c:f9:8a:
98:13:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:44:37 2025 by rpki-client