Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d753108-f9f6-3d89-8f18-a1e2e100cfb4.roa
File: 4d753108-f9f6-3d89-8f18-a1e2e100cfb4.roa (raw, json)
Hash identifier: sDexuvophdpQv6utAnbbll5q2XgdiRAVyGMcZGCWHlQ=
Subject key identifier: 3F:D1:F5:EA:AF:44:DE:48:B1:77:08:12:4F:29:8E:A8:7B:A3:D6:A5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01C6862B1A6F046AC8640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d753108-f9f6-3d89-8f18-a1e2e100cfb4.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 134346
IP address blocks: 2001:470:25e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1c:68:62:b1:a6:f0:46:ac:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=b86ae758-8689-4946-8787-9a5520aaf1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:dc:96:ee:40:80:9b:77:2f:b8:39:1b:bd:
42:d5:10:59:e6:3a:a0:f7:e8:f1:be:16:24:d5:c8:
24:b4:5e:e3:8a:bd:60:2b:43:a5:00:dd:9b:25:5b:
e0:c7:0a:62:f2:96:d5:c0:96:2b:d3:e5:07:ef:4a:
77:7a:e2:41:47:6c:65:02:58:dd:53:72:15:ef:41:
f3:65:d7:ab:75:48:ca:54:e3:2f:a7:cf:91:16:ff:
f9:80:f9:28:4f:4c:1a:fd:ad:fc:a0:fd:5b:e4:9b:
e3:e0:41:09:82:fe:34:89:af:ca:a4:d9:01:c4:cf:
69:10:ce:d5:84:41:56:60:1b:a4:0b:93:93:cc:d1:
59:a3:2d:e0:8d:a8:f8:a6:ce:e7:bf:fd:17:21:e1:
20:b7:13:a9:8e:a4:3c:6a:2d:28:f4:c0:08:7c:16:
33:51:62:76:54:0e:22:f7:00:38:15:d9:33:5a:3c:
79:29:ad:7f:16:b3:e0:e6:ee:2a:39:41:86:f2:6f:
2b:f5:7f:df:9f:6c:dd:70:fc:f9:08:be:0c:99:ff:
85:91:b1:40:a6:46:cd:56:5a:82:1d:e8:92:d1:82:
68:f7:24:4a:4f:90:90:71:3c:95:26:8b:3f:08:62:
63:17:7d:c3:a3:52:17:9c:8c:50:4d:46:6f:fa:1a:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:F5:EA:AF:44:DE:48:B1:77:08:12:4F:29:8E:A8:7B:A3:D6:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d753108-f9f6-3d89-8f18-a1e2e100cfb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:25e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:fe:5f:1d:ad:b0:7d:d5:4c:a8:f4:27:5f:3d:ab:1d:9f:68:
62:2a:92:ab:ec:88:4e:e0:4b:c0:54:de:18:d1:ab:03:ee:b6:
2f:91:36:e3:c3:ff:8c:fa:7c:4c:2d:bb:93:32:e2:66:d7:97:
33:0a:8a:19:c0:d0:84:60:f0:be:6f:7e:93:b2:df:7f:5a:d4:
7d:d7:e3:7d:bb:cf:5f:76:19:22:21:98:86:6f:bb:41:91:3d:
ca:fb:d3:23:f6:cd:d4:d5:dd:38:46:35:5f:b6:0e:40:8c:23:
f3:a3:e7:b9:87:b4:a8:a2:4f:e3:63:a8:b3:9f:80:25:37:99:
2f:e2:12:e7:e7:8f:63:10:31:5b:53:50:56:44:cb:58:7a:ff:
29:98:b5:36:19:9a:58:6a:55:f0:1f:84:6e:2b:d7:21:2c:1a:
d4:60:7e:45:60:1f:ca:1b:76:26:51:c0:96:b8:cd:23:52:23:
73:1c:29:e0:59:4a:24:a4:87:9d:48:2c:6b:45:02:ea:2c:30:
d3:d1:95:45:00:8a:51:38:91:ad:45:fd:57:85:72:7b:8a:20:
5f:65:62:13:29:f5:29:ed:07:ae:05:d8:3f:c2:fa:f7:90:ab:
84:8c:23:b5:19:0f:04:13:30:e3:c3:67:c1:fc:4b:ce:6b:77:
41:d0:04:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:28 2025 by rpki-client