Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30c1ac28-6af9-3dba-a520-0054f637bb34.roa
File: 30c1ac28-6af9-3dba-a520-0054f637bb34.roa (raw, json)
Hash identifier: p+bfhpNlqQ7IWTlaR252dCSw+RIyY/3cPUcVD22L2Zk=
Subject key identifier: 5C:C4:C7:6F:D6:D8:C5:19:C2:EB:AF:B0:DB:C2:7C:F9:BB:F6:60:70
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEE26366049BEFB352500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30c1ac28-6af9-3dba-a520-0054f637bb34.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 397787
IP address blocks: 2001:470:dd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ee:26:36:60:49:be:fb:35:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=745e2254-89c9-4f82-85d7-29ed8d621e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:cb:e3:bc:28:3a:ac:42:57:15:a7:6d:9c:
c5:18:28:69:c0:6d:7f:84:81:bb:5c:ba:80:56:fe:
ae:77:c1:9a:4a:27:42:36:a2:b1:38:e5:9f:5f:c7:
a7:53:7c:17:f4:d4:f9:a1:44:29:b9:c1:71:f3:b4:
80:ad:60:3c:32:a5:c3:83:a2:a6:46:5c:cf:3b:15:
4f:66:49:68:c6:a9:fa:66:b0:a8:46:17:98:fd:4d:
97:05:8c:8b:c2:af:71:59:c0:45:94:fb:88:e0:f7:
4e:b1:3b:35:7f:16:8f:2e:0c:ba:dc:6f:53:a6:f0:
74:08:fa:26:93:ad:bf:42:35:15:f1:ae:58:db:90:
0c:52:9c:26:95:0d:ba:13:56:a3:69:91:f8:76:9b:
6c:f5:09:58:d4:2d:a8:37:40:c5:d5:a6:a6:e4:f8:
da:1e:25:25:4b:0e:6f:b7:a7:5f:25:59:69:e5:c8:
10:3f:f8:3c:5a:55:08:58:29:b8:91:58:5c:dd:22:
06:42:94:de:b4:ab:65:97:21:e4:a4:d0:40:d1:38:
e6:b8:bf:bb:29:9b:1a:52:61:2a:b1:d9:e0:2c:29:
b4:5f:93:4c:4a:80:1b:24:5c:2a:8c:8c:13:4c:5b:
de:f6:a5:ac:84:ab:4f:82:7a:e1:40:07:b1:0b:f1:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:C7:6F:D6:D8:C5:19:C2:EB:AF:B0:DB:C2:7C:F9:BB:F6:60:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30c1ac28-6af9-3dba-a520-0054f637bb34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:dd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:24:a4:d0:3c:29:c2:5c:d3:6a:ee:97:e5:75:58:f3:8c:48:
39:3d:de:68:4a:ab:86:90:35:2e:3a:a5:26:78:06:93:75:7c:
dc:a8:0c:be:4f:10:c3:70:41:36:b1:d3:9b:d1:bf:ee:ec:7b:
0a:5f:70:7f:74:e1:07:61:51:f4:aa:ea:1d:7e:4f:21:c7:ac:
72:78:0d:ea:1e:e9:b9:98:37:1e:4d:7b:11:36:86:a5:29:fe:
67:60:b8:99:2b:9f:7d:6c:ee:a8:20:f5:f8:3f:cb:cb:34:00:
50:af:be:3f:84:cd:35:ed:a2:20:9b:22:bb:66:4f:8c:39:41:
28:92:54:d9:f3:3d:87:96:6c:2d:f5:fd:02:a6:58:4c:8e:b6:
b0:d1:a5:a9:73:a6:69:39:5f:4c:dd:6e:f6:be:8b:36:a6:e6:
a1:4b:81:8b:e4:dd:58:cb:c8:72:ab:40:e4:a4:12:f0:1c:85:
0c:f8:6f:0d:08:ce:9f:4c:47:17:d0:01:31:4f:b4:dc:a4:19:
5b:c4:fa:c9:b5:48:c1:f0:ec:6c:05:47:ef:4e:57:73:6c:92:
cf:6d:fc:08:bf:de:81:cb:22:bc:43:a1:79:62:df:e7:6b:47:
a9:17:f9:e5:7c:72:08:bc:98:49:25:80:f6:3f:75:0e:ab:65:
8e:02:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:29:57 2025 by rpki-client