Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa
File: 4a870679-debe-348f-a33d-6e54916a83ca.roa (raw, json)
Hash identifier: JhnO1lhxatf0ZYLx4ORtaa5hSgiHWgiS7m8t2p/r7UU=
Subject key identifier: 19:E4:8E:CD:8D:A0:AC:5E:12:93:66:92:C8:68:40:AF:A7:93:7C:72
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858488129B45232C382CCAABF38C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa
Signing time: Sat 11 Jan 2025 02:30:12 +0000
ROA not before: Sat 11 Jan 2025 02:30:12 +0000
ROA not after: Fri 11 Apr 2025 01:30:12 +0000
asID: 400587
IP address blocks: 2001:470:3ef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:29:b4:52:32:c3:82:cc:aa:bf:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 11 02:30:12 2025 GMT
Not After : Apr 11 01:30:12 2025 GMT
Subject: CN=5f1777cd-40fd-410e-ac41-2f470f9ac7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:dc:dc:a5:ec:9e:45:1d:eb:36:19:c3:60:17:
f5:fd:0e:84:0e:97:44:50:68:7d:96:97:e2:93:d5:
1b:82:fd:c0:a9:1d:0b:1b:19:1d:9a:41:4a:b7:69:
8c:44:ae:05:cb:0f:a0:b8:c8:86:8a:9c:2a:5f:91:
45:41:98:b6:30:ed:1a:09:b0:2b:7d:ad:3e:e3:24:
55:ce:c2:ea:d3:64:bb:c4:bd:4d:df:cd:35:05:cc:
01:31:36:dc:33:75:9d:d5:98:af:2e:81:9a:52:40:
cb:40:1c:7c:54:e5:46:c2:34:26:43:5b:c4:7c:3e:
eb:3b:79:51:87:25:ba:c2:96:bf:d5:c7:d1:39:42:
b2:b8:10:95:75:fb:ec:6e:a1:b7:09:2e:37:10:f5:
c7:b5:4b:1a:43:5f:cf:5f:90:98:3d:06:97:20:59:
be:19:59:16:45:67:8d:56:e7:1d:25:90:f4:1d:9f:
bd:7c:cc:21:e7:55:bb:c7:d1:0d:85:ab:66:7b:90:
e0:7d:1c:5a:82:cb:92:d0:6e:62:ed:4b:e0:c3:be:
cb:9a:ee:e5:fe:43:dd:d0:cf:58:c8:35:ea:7f:c2:
14:97:62:db:c3:1b:06:fd:c4:ae:ce:b4:b7:35:77:
95:9a:97:f1:12:06:62:89:13:5e:02:e9:c0:81:b5:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E4:8E:CD:8D:A0:AC:5E:12:93:66:92:C8:68:40:AF:A7:93:7C:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:33:55:64:ce:6e:ac:95:c3:8a:a3:a0:b3:fa:df:f2:28:17:
01:86:71:a5:0c:63:63:fa:50:f2:d0:6e:ac:0a:96:c3:30:ee:
39:0a:52:f2:e5:41:82:0c:81:d5:ef:f4:07:0b:e5:b9:dc:8b:
22:12:3f:4f:cb:7a:1a:75:38:75:52:57:55:e8:c8:32:5b:13:
da:df:1b:22:72:96:44:15:06:d5:83:3d:98:97:13:4a:71:47:
d3:b5:2c:f8:da:7d:1f:86:04:50:de:28:97:02:8e:13:5e:e7:
3c:a3:6c:7a:87:43:bf:92:b8:ca:24:b2:d6:a8:52:cf:ae:31:
0d:61:58:60:53:bf:f6:32:bf:9c:86:cb:1f:8b:2b:91:b3:e3:
16:d0:db:35:ad:d5:e3:5a:d7:a8:e7:a3:44:44:80:a7:6c:06:
3c:32:32:2a:fc:5e:d0:5a:92:7d:dd:9a:ee:d4:0c:d1:47:d7:
50:53:bd:35:9f:6d:f1:0d:8f:d9:bf:2b:46:01:f6:af:1f:e6:
9c:94:c1:d5:d3:a7:37:33:3c:d2:3f:5b:2f:ff:8f:ad:43:48:
62:b5:41:2c:83:16:1f:a8:28:d5:08:8a:5e:24:00:f2:a8:eb:
5b:61:34:0f:62:03:6d:4f:cd:27:44:90:22:da:e5:84:49:2e:
97:07:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:54 2025 by rpki-client