Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa
File: 33289b88-fa83-3536-a945-62a5541157ad.roa (raw, json)
Hash identifier: sf0NiJwyXf8cYQHTuDSMmc49iC5inCG/NKDLLPCA5KA=
Subject key identifier: C4:08:6B:28:18:3E:B9:2A:98:A7:9D:AC:D0:2E:CA:B8:4A:FD:A9:A3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858489FDF3668ABE8F3C0A6D6F840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa
Signing time: Wed 22 Jan 2025 02:30:10 +0000
ROA not before: Wed 22 Jan 2025 02:30:10 +0000
ROA not after: Tue 22 Apr 2025 01:30:10 +0000
asID: 22168
IP address blocks: 2001:470:3f6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:df:36:68:ab:e8:f3:c0:a6:d6:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 22 02:30:10 2025 GMT
Not After : Apr 22 01:30:10 2025 GMT
Subject: CN=a0f4ec06-1487-43aa-a1a6-c14342962115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:0e:f1:c3:a8:17:62:da:9c:93:78:92:3f:
ed:1f:37:b1:cc:10:d0:c6:46:00:2a:6e:a4:3e:f4:
e2:3e:96:9f:eb:96:32:9f:72:f0:2a:cd:96:49:d9:
aa:ea:b6:48:02:48:84:a4:92:d6:90:19:e8:c6:76:
bb:8e:e7:c4:6b:2c:25:8c:90:88:3f:d7:7f:01:75:
1f:8c:f6:14:de:34:8c:7d:92:fa:f4:39:a6:49:05:
16:7d:cc:e7:94:07:21:e8:d2:69:34:71:2e:1d:34:
22:3a:8e:ef:a5:6d:63:0b:15:c2:cb:25:2d:62:d7:
04:b6:f0:d2:b2:fd:99:1e:b5:a3:18:39:07:87:08:
3f:f3:9b:35:0e:69:5b:d9:06:99:aa:78:e9:94:3f:
20:e3:a5:f0:11:86:78:fa:30:7f:ea:2b:ac:77:5d:
ec:e9:08:2d:e3:5c:f2:11:f4:97:33:03:ed:a4:f2:
57:4a:2d:cc:cd:95:8f:62:38:ca:3d:bf:94:4f:51:
fa:25:7a:53:0a:bd:67:f9:a6:1a:72:e5:5c:e5:f7:
87:be:67:9e:30:9a:47:fc:0b:21:61:f0:4b:9c:e4:
98:e5:c9:36:56:0a:56:7f:e7:64:85:3d:c0:c7:b3:
73:b4:46:9a:6c:c0:93:f4:51:88:ce:56:e7:84:6d:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:6B:28:18:3E:B9:2A:98:A7:9D:AC:D0:2E:CA:B8:4A:FD:A9:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:0c:72:79:15:a9:b3:d9:18:aa:09:6e:ee:ac:a8:80:8a:8d:
ec:a3:89:4f:7f:fa:bd:35:3f:a6:d6:08:7c:9d:2b:f7:77:c7:
45:de:54:5c:f5:d6:3b:cb:ec:11:44:d3:99:2e:d2:2a:13:ee:
80:29:5e:89:94:87:3b:3a:51:5d:e7:c3:0b:c9:69:c8:3e:10:
53:14:2d:f5:19:99:c2:f6:d4:84:58:e2:5d:b5:90:c5:ad:b6:
f6:20:d7:c4:6d:02:d6:64:0f:00:fc:32:29:bd:79:48:3d:07:
3a:f8:28:68:bc:fd:03:4d:d5:81:78:8b:83:72:74:f1:fa:60:
7b:52:17:83:57:ec:ea:63:0a:07:76:29:15:d8:5f:54:e1:a4:
8d:f3:07:aa:8b:8b:b6:66:14:8c:da:8b:97:94:61:3a:f0:02:
f2:5d:74:9c:7f:74:9b:9d:50:f1:fc:c2:f9:54:a7:37:d4:b8:
a1:65:8e:60:5b:eb:0a:24:36:d0:ca:21:a9:5a:5b:f9:f6:b6:
4d:6b:74:ad:c2:b3:66:f1:3f:e7:dc:b8:80:60:d4:1c:56:dd:
e3:e1:ff:e1:70:fb:ed:95:e9:ed:ef:f8:37:c6:6b:a1:aa:eb:
db:a2:03:77:8c:72:b7:d1:91:b4:09:38:d4:13:3a:4f:5c:39:
6d:06:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:16 2025 by rpki-client