Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa
File: 4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa (raw, json)
Hash identifier: tQdBK5P9HBeFlLpDU5drMTZCyDNahNjr7237ZXH+pwQ=
Subject key identifier: D9:EC:6C:B5:35:2A:21:7C:28:08:41:97:BF:F2:3A:0F:BC:EE:48:3B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858482BF574EE4638BDE78AA1AFC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 395517
IP address blocks: 2001:470:57::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:74:ee:46:38:bd:e7:8a:a1:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=a1e039c6-02c7-4ae1-90af-2b0f2161e425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6f:cd:48:35:52:70:b6:9a:c5:cb:69:48:0b:
1d:81:c6:e5:99:77:e5:55:da:77:d9:95:c2:14:5e:
37:a8:68:c5:c7:20:f4:55:bd:76:1e:37:12:a0:e2:
cb:38:76:91:32:8a:18:30:5d:ab:13:82:4f:02:28:
e3:63:6c:48:7d:4e:cb:32:fb:61:eb:90:a9:d2:2e:
ff:aa:58:a1:fa:29:16:f2:71:7e:d4:24:14:ee:db:
90:39:d8:1e:87:61:79:0c:ea:c8:ba:ba:91:16:2c:
5e:ac:61:c6:74:53:4c:ca:30:ad:eb:75:c3:33:a9:
47:91:39:51:b3:78:59:a7:d8:f2:3a:1a:6d:56:e1:
ce:1d:17:3d:d1:1e:51:db:34:08:c9:97:7d:30:78:
ab:aa:1c:46:77:62:55:f4:6d:f3:61:a9:f9:26:bb:
fb:69:0a:a3:4f:9f:e2:d4:72:e8:18:35:ed:09:f9:
0b:db:96:8c:ea:43:86:d4:cd:a1:cf:c7:c2:a7:f4:
44:c9:05:59:77:25:4a:26:68:2f:5f:1f:bf:ee:48:
57:2a:a1:f3:60:e0:3e:7e:47:ef:40:bf:79:ac:83:
d9:d0:bd:a0:a9:81:a8:41:b5:8c:0d:d3:c8:67:ba:
db:d2:df:e6:a1:e7:4b:bc:4b:95:23:99:82:38:26:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EC:6C:B5:35:2A:21:7C:28:08:41:97:BF:F2:3A:0F:BC:EE:48:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:57::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ea:a0:20:77:5c:0b:00:5f:8f:c4:cd:62:6d:b9:ad:37:69:
9a:bc:11:57:a1:c4:dc:26:1b:56:17:97:44:96:f5:8c:f9:20:
a1:ec:cf:e9:3d:f1:fd:de:32:af:d1:e0:d6:13:5c:64:62:4e:
b5:b2:8f:81:29:d5:98:8e:9e:a0:0d:d7:d1:12:76:c1:5c:5c:
3f:e7:22:9e:60:3a:58:0b:5e:93:96:f3:17:7b:d8:9e:15:39:
e0:29:0f:3b:33:84:6b:e9:a6:9b:77:62:c9:c7:bb:85:48:55:
60:32:0e:29:6a:30:83:7c:28:33:31:06:5b:7a:78:9a:17:45:
bf:ef:91:7c:3f:ca:32:76:fa:fe:4c:60:da:16:49:51:5e:ad:
46:cf:6c:0e:84:d5:6e:2a:2e:a2:8b:9f:bf:51:4e:93:e7:2b:
69:04:df:aa:c8:f2:4e:44:28:a9:e4:6e:31:2d:44:25:71:d9:
92:ec:be:b3:aa:eb:47:63:71:63:4b:b4:28:f5:dd:73:34:30:
cc:22:4e:30:9d:6b:c0:cc:5c:2c:bb:07:9f:7f:61:28:16:74:
74:4b:23:dc:e7:ad:26:08:4c:3c:dc:a1:31:ea:06:15:3c:dc:
2d:64:f0:1c:fc:8f:7e:ea:19:bc:f5:27:5b:f9:49:67:d7:fb:
bb:2b:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:00:11 2025 by rpki-client