Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c4ae3df-10f2-37b1-98f9-ce605cc38867.roa
File: 4c4ae3df-10f2-37b1-98f9-ce605cc38867.roa (raw, json)
Hash identifier: aS/9MkM0H/4olk8VnFup3VC880p9YUq+2ciXvfccqAE=
Subject key identifier: E1:D9:AE:BA:9E:98:85:29:F8:D1:78:2C:BF:A9:5F:10:0F:B8:8D:AD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01C17A0FFDE3720B1A2C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c4ae3df-10f2-37b1-98f9-ce605cc38867.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 399784
IP address blocks: 2001:470:153::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1c:17:a0:ff:de:37:20:b1:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=21e197b1-693a-431e-b1de-75901c37dffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:87:b6:b1:02:92:85:f3:a9:0c:7a:e0:6a:
fe:c5:ec:16:e8:e4:09:b9:80:44:8c:07:eb:c2:89:
37:cb:37:b5:ab:1c:a0:9e:9a:66:43:61:33:6c:93:
4f:24:cb:d5:11:6e:c4:95:9e:c6:0f:4b:51:e5:a5:
1e:e6:be:48:ac:ef:15:5e:e6:fa:a6:7f:34:8b:93:
d9:dd:d9:2f:dd:f4:b2:3a:a8:fa:75:f8:81:21:01:
05:19:af:55:c1:ec:59:01:05:d4:88:ea:27:23:2f:
5b:7a:21:e7:10:76:da:d5:a7:c9:6a:f6:49:33:16:
5d:30:40:1f:f0:1c:f7:86:bc:a3:dd:d6:24:5f:f5:
b2:52:1b:f3:3d:6a:9c:c5:8f:92:e9:5e:17:83:a0:
64:a1:64:ab:0e:09:20:0f:4f:3d:72:5c:7e:b3:bd:
ba:66:47:9d:5e:95:53:f4:8d:8d:f4:ce:75:f7:0c:
30:50:eb:3b:31:11:d3:86:1d:a6:0c:53:1f:4a:62:
65:80:33:b6:84:ba:5b:8a:81:59:35:aa:fa:38:fb:
b1:ba:eb:d0:b3:cb:4c:01:37:22:27:79:e3:82:cf:
32:7c:53:27:7d:51:1f:91:b9:59:15:93:1f:4d:20:
10:7b:ef:41:11:2d:51:c3:f5:f4:c9:be:15:7c:59:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:AE:BA:9E:98:85:29:F8:D1:78:2C:BF:A9:5F:10:0F:B8:8D:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c4ae3df-10f2-37b1-98f9-ce605cc38867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:153::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:5a:f2:20:52:71:b6:48:72:c9:82:1a:7c:fa:3f:f4:6c:82:
57:0d:32:67:18:3d:54:10:bd:21:a2:22:82:10:95:af:be:45:
4f:bd:75:f9:f5:9b:e8:ac:17:a7:4f:7b:ba:ae:5a:58:f9:31:
92:99:e6:c2:8e:e5:f7:65:3a:83:6a:5d:f3:e8:f8:6a:4c:7d:
68:9f:46:5a:39:95:8f:05:f7:fc:05:ae:0f:66:7b:c1:aa:cb:
e2:13:fc:ca:e4:fa:f3:5b:a6:b3:74:16:83:fc:58:52:ba:24:
0b:b4:10:65:a5:2c:b9:94:1b:10:f0:e5:34:7d:a7:3f:39:a5:
55:31:1b:e0:bc:c2:9e:6a:c8:f9:5b:a0:9b:2d:f4:66:39:5a:
0f:38:47:3e:57:de:fb:9c:fc:79:c0:14:2b:9b:8b:4d:f3:c3:
cf:37:3f:88:87:7b:bf:a8:1f:12:1a:eb:b5:7e:2e:53:ea:60:
dd:0e:bd:71:5f:ff:31:2c:01:1b:47:8a:98:a7:fc:1f:07:b6:
9f:ff:eb:85:d3:e2:f4:33:f0:62:af:ec:3b:ce:58:bc:4b:85:
9f:a1:de:31:a9:17:ed:f0:c8:02:64:81:df:ce:08:69:a8:dd:
9c:01:27:fa:67:8e:d7:b9:fc:4c:e8:8f:57:78:78:b2:22:4d:
ab:62:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:16 2025 by rpki-client