Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5254cc7d-4ed1-39ad-990e-f45727ab95d2.roa
File: 5254cc7d-4ed1-39ad-990e-f45727ab95d2.roa (raw, json)
Hash identifier: nQpSVLNLRjRnJ3HCvYLpHmqa2T78fM65xL+OcE3/6po=
Subject key identifier: 11:30:90:72:8F:04:C8:35:96:CF:15:F8:B2:31:35:CA:34:6D:0E:12
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D02273056876CF58524C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5254cc7d-4ed1-39ad-990e-f45727ab95d2.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 40934
IP address blocks: 2001:470:31f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:22:73:05:68:76:cf:58:52:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=4fc88237-1001-4bff-ae42-d9764b88bbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:fe:82:f3:4f:4c:0d:dc:7a:89:b4:2d:28:
ff:08:2e:5e:5b:f6:22:c3:e4:4a:0b:40:82:04:90:
a4:3e:99:80:76:f7:4d:d8:22:d6:d3:18:5f:cb:43:
d9:ed:11:b2:e0:0e:70:76:2f:12:ad:0e:0e:3e:87:
89:34:65:a7:db:71:8a:42:a0:c0:87:d0:ce:60:2b:
11:d8:d7:05:2a:17:bf:32:92:a5:e0:ea:a0:be:a4:
28:ad:2a:02:7e:ec:9d:50:ef:c8:39:d8:af:42:9b:
6b:e3:5a:2d:de:c2:16:b1:64:b6:ab:23:b1:83:46:
05:c9:87:eb:f5:d3:33:ce:02:6d:ac:30:a5:cd:da:
47:61:0b:99:92:23:3c:f2:e2:00:9b:9c:cf:fa:3f:
94:5e:e0:ec:0b:50:e0:ec:43:c0:0f:38:bc:2f:20:
07:f7:a7:21:bf:bd:91:c2:1b:60:7f:51:7f:99:8f:
8c:ae:dc:b6:2d:f9:51:53:ca:83:c0:51:c2:d7:cc:
b2:d8:ef:14:4a:c0:77:5c:a4:4b:3a:e3:c0:18:a5:
35:25:b6:c7:5a:80:c7:b3:a6:a2:88:98:97:54:ea:
aa:bd:a8:d5:78:ac:09:ff:32:6c:65:95:78:b5:50:
c3:cf:7f:5e:d3:08:f0:90:83:2b:61:e6:36:05:a4:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:30:90:72:8F:04:C8:35:96:CF:15:F8:B2:31:35:CA:34:6D:0E:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5254cc7d-4ed1-39ad-990e-f45727ab95d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ef:9c:01:a4:0e:81:d0:2e:7d:13:15:71:92:5f:4d:a5:1b:
4d:a5:f2:c2:c5:b6:ff:60:9f:d6:58:b9:5a:42:e9:9c:06:9c:
e3:3b:93:d6:63:c3:f6:41:10:54:08:87:b6:c8:50:c4:5b:96:
58:d5:42:83:79:dd:27:31:1f:5b:d9:e9:2f:d3:aa:78:02:1b:
6e:2d:f2:45:ab:47:bb:4b:13:e6:c4:e0:b2:d4:14:b5:ec:33:
48:cb:37:7b:e5:ca:24:db:c8:22:08:27:76:31:01:b9:39:46:
f8:86:6c:37:4c:a5:98:2a:61:a5:e1:dd:d6:89:a2:0d:16:fa:
c5:94:8e:5a:ce:a2:61:3b:12:1b:5f:df:c4:40:a4:e5:a0:9f:
e0:d7:1f:ac:78:5b:b2:68:19:89:7f:f8:a1:3f:4a:5d:90:31:
7f:1c:2f:d2:6d:b8:97:d9:0e:de:6e:32:56:f6:c5:66:8f:eb:
d4:e8:85:04:f6:50:86:d9:c0:b6:cf:3a:81:08:81:58:bb:6a:
76:2b:fc:3d:7a:1a:bf:cd:70:13:6c:70:c6:2c:0c:66:73:17:
c1:d3:57:dd:dd:ed:88:92:6b:27:a6:29:0e:89:25:d4:a7:f7:
91:2d:f2:8f:61:88:bf:eb:16:81:69:22:fb:9d:22:4f:ae:97:
59:ea:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:16 2025 by rpki-client