Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa
File: 4d40b93d-acec-38dd-9713-18db9799f2d9.roa (raw, json)
Hash identifier: jJpVmWuP4EVwIQZtEJv9KTTc3fAlYbmfkCpBBaVk6xs=
Subject key identifier: 03:64:FE:59:9D:C4:6C:03:63:B1:1E:8E:8D:C0:51:FC:32:88:2D:D4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0004BFD9F0F68F1B11C60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 20432
IP address blocks: 2001:470:295::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:00:4b:fd:9f:0f:68:f1:b1:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=abd38f9b-6f9f-4a8b-bc77-eb7439c9e8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:a1:65:fc:10:8c:4c:5a:0e:e9:b9:7c:59:
b2:78:62:06:dd:7a:0a:ef:e2:65:7e:c9:73:77:b1:
60:04:00:8b:55:06:ff:95:95:55:09:d6:3c:5a:cb:
70:35:a3:df:fa:f6:60:8b:47:04:fd:8e:b7:2a:fd:
a8:52:2d:67:51:20:b7:73:c1:1d:f1:92:29:fe:97:
49:18:72:45:bb:c5:09:4b:05:98:52:99:ed:2a:a0:
68:c8:c0:30:1a:f1:37:33:44:b3:fd:94:22:c7:2a:
52:c2:a7:ee:eb:de:4f:b5:e1:34:7e:6b:2e:cb:89:
74:3d:f6:46:ba:3e:e3:21:ed:1d:41:73:60:61:7a:
b7:67:1a:32:0f:2a:56:49:6d:e4:16:c5:cb:ec:a1:
df:80:cf:4e:59:58:da:d4:2b:f7:d2:12:d6:79:eb:
a4:06:10:47:b0:2f:4b:1f:8d:c2:41:48:3c:4f:96:
dd:ee:1f:e5:20:e4:b3:05:1c:62:d3:e6:1e:f4:6d:
9a:11:bb:04:e6:b4:2f:03:5f:d2:e1:98:1e:29:47:
4a:d6:36:a9:1e:ab:ca:3e:38:4d:e2:b5:1c:ba:84:
34:aa:51:2c:b7:6c:78:72:db:3b:3d:0f:61:91:bf:
ab:46:11:e1:b7:b4:62:a7:25:be:81:c7:bc:2f:4c:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:64:FE:59:9D:C4:6C:03:63:B1:1E:8E:8D:C0:51:FC:32:88:2D:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:295::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:77:4c:6e:89:a8:5a:ca:72:97:22:6c:63:e7:56:05:7e:a7:
54:59:5b:f6:f0:56:2c:89:3a:4a:b8:58:01:5b:f5:fc:22:d8:
1d:d1:3f:f1:b5:4b:c9:d3:47:5b:9c:45:ab:a3:f4:b1:f0:03:
aa:b6:99:56:4a:1e:04:7b:39:e2:6f:dd:24:ed:af:4f:c2:27:
a7:8a:1b:cf:00:91:fe:e8:4e:91:c0:1b:ab:92:ab:a6:23:2b:
f0:f0:8a:89:af:a7:a4:cd:21:5c:81:75:f2:0a:e2:da:70:41:
43:82:d7:24:4b:fa:5c:59:6c:da:96:b3:99:af:f3:9e:26:e6:
93:20:f8:2d:be:24:a5:d8:0d:5a:7b:a1:50:a4:27:29:50:2e:
65:72:07:3c:53:a0:be:58:12:c5:d7:63:d5:75:81:a9:78:cd:
b6:c0:c4:97:57:10:fd:40:cb:92:0f:2b:03:b1:64:b6:7b:1c:
90:72:4b:44:8a:93:33:8b:12:71:cb:fb:cd:b4:5b:a3:48:4a:
19:82:ae:cb:ae:d2:e4:5c:12:d2:7b:e2:0f:6c:a7:4d:99:17:
d7:71:33:08:7f:48:e9:40:bf:3a:50:6b:e1:4b:9d:3b:8f:0a:
1b:aa:76:77:8e:ce:18:08:b9:b4:e2:9f:0a:f9:6f:02:17:54:
9b:e1:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:08 2025 by rpki-client