Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa
File: 3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa (raw, json)
Hash identifier: 9FJS2qCR7DYeJLtzw0hyJjQ4Iw9UcBeoi7o4SYXO0eg=
Subject key identifier: D9:EB:61:9E:BB:9D:13:79:A0:CD:15:49:16:91:A7:C2:3C:A8:F2:A0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00642071AD51E94A5EA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 23703
IP address blocks: 2001:470:314::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:06:42:07:1a:d5:1e:94:a5:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=96eb7612-9d00-4830-98b8-efb009fff0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:79:d7:ff:4e:18:2e:59:04:27:a2:e9:bc:
46:b0:e7:59:ec:1b:05:2a:b1:96:19:37:b9:30:a7:
30:88:d6:4a:6a:66:d7:69:b7:ab:cf:f5:d2:b8:be:
26:a3:c3:9b:e1:eb:ce:99:e0:74:e3:84:10:c9:b7:
33:f9:4b:b5:49:67:e1:bd:bb:ea:5c:b1:75:00:7e:
61:0d:30:5e:1d:c4:d6:ca:45:f0:48:a5:93:0f:1f:
6b:b7:ad:61:16:51:e6:d7:2b:53:d2:21:28:4d:63:
ee:5a:e0:ba:7a:e3:8f:6d:70:cc:51:1c:47:0d:20:
1f:d0:34:ad:1c:e7:20:56:35:1a:43:aa:36:e6:25:
78:ca:b4:6c:4a:ad:b3:e0:1a:25:89:65:e2:d2:5f:
ab:34:7c:2f:ee:1f:19:95:ed:b5:09:37:fc:0b:c3:
3d:bc:2c:5e:a7:fa:49:cb:51:d8:82:32:71:31:95:
ea:57:36:b2:7e:7d:52:9b:9f:cd:01:89:a1:a5:f5:
33:1b:fd:f1:b3:78:aa:2c:c6:9b:64:3f:b2:99:4b:
50:bd:af:2f:17:a7:6d:43:6d:e1:6b:e6:8a:1f:2b:
f7:c8:af:65:ae:22:85:48:46:69:e7:52:7d:89:a2:
d3:a0:a7:4b:8e:a5:51:17:69:69:c3:1c:1e:f3:24:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EB:61:9E:BB:9D:13:79:A0:CD:15:49:16:91:A7:C2:3C:A8:F2:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:314::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:9b:af:12:3b:6b:db:67:8e:1c:ef:85:c9:f6:be:22:ee:91:
36:b2:3b:8b:3a:d1:ef:10:b6:19:e6:bc:8d:c1:05:df:c5:39:
2b:90:91:54:bb:0c:9e:cb:b5:55:e6:e8:8d:37:53:a0:49:6a:
8e:e9:7a:71:3f:b8:bf:1e:ef:23:ca:b8:7d:f8:70:1d:75:4e:
c0:ad:c4:aa:1b:e3:58:f1:08:ff:a9:09:2b:d7:11:58:14:f3:
07:31:21:c5:0c:58:b5:13:28:19:47:33:01:9a:d3:97:4c:bc:
1d:95:e0:76:71:4a:16:ed:51:88:12:0a:32:ed:85:d0:90:71:
81:5a:21:5b:c0:ef:e0:73:f0:93:8e:1b:82:bb:4a:9b:48:8e:
7b:cf:73:7f:1b:76:e4:5b:ec:44:95:7a:b1:26:f4:b9:6b:5e:
a6:f3:49:f4:18:83:0c:2a:ff:3c:19:e8:8d:bd:35:5e:48:0d:
99:fd:da:a2:0a:88:29:67:27:5e:de:d7:88:9b:02:10:ad:12:
3a:cb:fe:6a:4d:9c:c8:74:8b:d7:6b:26:a1:6f:fd:82:78:10:
33:80:ae:2d:1a:26:99:1a:67:0a:47:1f:d4:25:e0:4b:78:f7:
2f:e0:8f:79:d0:ce:aa:72:58:69:f7:46:25:38:e1:40:25:2b:
6e:9a:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:48:24 2025 by rpki-client