Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/433c90f6-79c2-325f-9f2f-8ea52eaa23b4.roa
File: 433c90f6-79c2-325f-9f2f-8ea52eaa23b4.roa (raw, json)
Hash identifier: dRfAuMBt7mn7S90QZkYYuD/KvghbI6lzo6Qyp81WZyc=
Subject key identifier: 22:40:EB:DF:CD:00:3D:47:43:1D:F4:B2:36:2A:54:0D:B6:6A:5B:D6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFE10A5CFC31F6201E200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/433c90f6-79c2-325f-9f2f-8ea52eaa23b4.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 51765
IP address blocks: 2001:470:25f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fe:10:a5:cf:c3:1f:62:01:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=c1e2c65b-611d-4a09-b8c0-39c274f5b2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:e3:04:89:4c:e0:e4:7e:da:11:c5:cb:8d:
43:57:3a:d8:55:de:c6:54:c1:eb:07:29:68:a9:f0:
13:66:65:fd:f7:14:ee:51:6a:cd:3a:1d:a6:27:86:
ce:c4:97:0d:57:82:39:7a:23:75:e2:a0:4c:e9:34:
12:22:de:98:7b:ec:bd:38:71:02:e8:e1:36:0b:bc:
d4:a9:d1:1f:be:67:f0:59:df:c5:2d:ed:ec:bf:e7:
51:cb:d1:58:99:9b:e7:2e:2f:71:ae:1e:69:1d:dd:
1a:b6:ac:5d:f5:f9:0d:5b:5f:c1:c5:2a:43:aa:74:
5f:84:77:b2:e7:57:a0:a9:d7:45:12:9a:7b:f0:e1:
17:be:99:c8:e5:ef:c3:09:bd:7a:a8:81:f6:1b:ac:
75:5a:af:af:d8:f0:de:f5:af:86:2e:91:e2:a9:55:
63:a1:9e:67:47:5e:89:b1:9c:a6:65:af:f9:46:de:
9b:e5:8e:f0:ab:ed:2b:c5:7e:3a:42:16:43:05:e8:
11:f9:c7:b8:57:68:35:67:57:f8:60:e7:30:ea:de:
01:99:13:ce:49:59:ca:ab:ba:00:da:01:a2:7f:e8:
b7:fb:74:3d:8e:6d:95:9e:91:b5:b5:21:b3:9e:a8:
85:40:16:ea:c2:36:6c:a0:4f:7f:80:ed:3c:9b:04:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:EB:DF:CD:00:3D:47:43:1D:F4:B2:36:2A:54:0D:B6:6A:5B:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/433c90f6-79c2-325f-9f2f-8ea52eaa23b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:25f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:dc:75:b3:ba:62:17:14:86:78:a5:40:bd:02:bd:c0:0f:7d:
38:f8:9e:ba:1d:e1:5b:74:38:14:f6:09:6c:be:7c:e3:b5:53:
3d:6a:7e:40:c9:3f:0f:64:85:66:9d:d0:00:53:93:2b:98:34:
0a:45:ab:34:a3:ac:4c:2a:c4:80:24:be:25:1a:71:a6:04:21:
34:7a:4d:45:29:a7:ea:72:b9:b4:ab:92:16:72:4b:c7:22:01:
28:44:80:aa:16:bc:9a:e9:af:d2:7e:95:ea:73:0a:3b:51:02:
ad:70:a3:9a:be:ff:ea:4e:d3:40:00:35:b7:ff:a7:c5:fa:fc:
b3:34:03:e5:67:39:e9:b4:4c:0d:63:8d:a9:41:8d:7f:6f:e7:
df:ce:a8:66:2f:6c:c1:58:62:a0:25:3d:f5:96:bf:05:07:84:
0a:7b:51:1c:2a:a1:f0:7b:24:07:67:2a:08:d0:09:ef:34:8d:
fc:cc:ac:75:af:ad:06:a3:de:22:62:6a:48:68:eb:f4:33:6a:
66:b3:47:80:51:18:72:45:7f:f1:34:02:8f:b7:fc:19:57:8d:
36:db:7d:99:9b:f7:3b:2b:ce:2b:a7:3f:da:db:66:39:a1:3c:
2d:67:3a:e8:50:7d:34:5d:9a:71:4c:7a:be:a0:49:fc:19:69:
ba:cd:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:21 2025 by rpki-client