Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa
File: 3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa (raw, json)
Hash identifier: BnawyEEp504zzKS48JI59qZzT1pXYsXU52NYLGCGD1k=
Subject key identifier: 70:68:76:E9:70:15:09:63:97:D4:25:96:B8:94:BF:C5:D9:3F:17:95
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D006B4F7B4271437EC9080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 398493
IP address blocks: 2001:470:31d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:06:b4:f7:b4:27:14:37:ec:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=0428b909-7928-43e7-82fb-481daf190b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:42:17:a8:ff:5c:12:3c:e4:7c:44:5a:45:
ff:19:00:73:f2:96:17:6f:49:42:60:67:a3:cd:0f:
95:87:d0:9b:97:1a:58:1d:6c:ed:7b:25:c3:8b:26:
4c:f8:86:ce:1b:ab:35:d3:5f:bd:e6:ae:04:97:14:
8e:23:30:1e:22:71:fc:bc:1d:03:af:61:c8:a6:62:
99:33:10:c5:59:08:c0:8d:c8:77:c2:3f:04:74:f8:
69:23:a8:e9:78:e8:2a:e4:ba:03:0c:ba:5b:93:b3:
8d:b0:3c:a5:ee:96:17:ea:78:3b:97:2a:cc:79:ff:
d1:09:81:79:90:01:6e:95:be:ee:bf:63:9f:45:7e:
2a:df:79:7b:f8:24:b6:8a:9c:43:e0:1c:35:94:b1:
d5:93:e8:6f:dd:91:f0:eb:ca:7d:37:63:89:c1:68:
75:e2:dc:af:00:7c:2d:82:9e:92:29:55:dd:c8:dd:
7e:17:e5:3d:e2:a2:9e:d5:e9:3c:1f:85:0f:79:02:
32:a4:20:f7:ef:ad:0a:53:63:71:54:9e:35:3a:76:
46:4b:96:12:3e:57:e9:0d:04:5e:13:6f:1c:3e:4f:
e8:12:5f:17:79:3b:6f:1d:5e:0e:80:88:0e:34:d8:
11:af:c2:42:39:73:3b:93:c9:eb:6c:70:8a:c8:a5:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:76:E9:70:15:09:63:97:D4:25:96:B8:94:BF:C5:D9:3F:17:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:08:f3:ea:63:18:a9:3e:25:c9:2c:11:52:00:af:81:62:77:
55:57:8a:3e:52:a2:94:8c:09:47:9e:ae:c5:fd:6e:dd:61:45:
dc:ba:c1:00:1f:fd:37:3a:9b:81:15:85:17:4b:98:0d:e6:28:
17:2a:28:95:8c:67:89:81:af:41:69:33:0f:dd:a7:b4:a7:49:
71:02:09:64:1f:76:53:7e:51:92:21:ca:95:c2:5a:7d:2e:97:
5e:c4:1e:e3:56:08:99:4c:07:50:a6:24:e3:8c:3b:e7:ad:54:
32:aa:1c:5a:3f:e7:3f:e7:ab:a3:59:b5:84:23:ba:d5:da:42:
a4:49:1a:c4:28:92:1a:55:ff:e3:51:21:bd:91:d0:33:62:4d:
9e:4d:66:94:51:4a:3f:89:17:5f:0f:e8:34:22:f6:03:e8:de:
ef:cd:d5:33:30:12:71:49:c5:42:c3:f1:82:12:8b:11:f8:92:
61:c9:06:96:f1:ca:c3:67:af:8d:39:f3:87:9a:eb:cd:5a:f8:
cf:de:36:a7:04:d3:d8:8a:87:ff:23:5d:4f:d3:1e:f0:84:db:
c5:d7:2e:d9:6a:75:b8:ea:12:b8:2a:f7:8a:25:ef:7f:e2:8d:
94:7d:eb:ee:31:1f:24:f2:ee:af:92:cb:c6:2a:ff:d5:f3:38:
02:90:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:53 2025 by rpki-client