Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e5614a5-b4ca-30d9-8bcc-1dd2cf3e7e81.roa
File: 5e5614a5-b4ca-30d9-8bcc-1dd2cf3e7e81.roa (raw, json)
Hash identifier: +Ej+eJ4W9mmD/W0F4/CTvERkdqPpGAnzAr5DAGNbBqE=
Subject key identifier: 91:A9:14:23:91:55:CB:42:0D:0D:51:0A:57:5B:55:A6:75:10:22:AE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF829414116A0E813C3C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e5614a5-b4ca-30d9-8bcc-1dd2cf3e7e81.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 32552
IP address blocks: 2001:470:3a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f8:29:41:41:16:a0:e8:13:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=24c293c2-0545-4ea4-98d1-39de212a2407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:bb:0d:94:7b:56:a6:d1:fd:01:78:db:51:
2e:ee:92:28:cf:4f:75:ed:7f:25:34:4a:84:fe:4d:
df:8c:64:98:92:59:da:91:be:66:d9:ae:dc:f6:24:
c5:66:45:e5:73:57:77:3c:a6:f8:3c:b6:ce:93:74:
37:71:c1:09:fe:d1:ed:8d:af:ec:c9:c9:20:82:74:
39:ee:1e:3b:3e:ae:a1:1a:21:91:df:7f:46:13:f6:
10:4b:b7:65:3e:27:dd:e9:3a:a0:aa:28:1e:d4:76:
8b:1f:b2:8e:aa:5c:d9:94:89:6d:b7:00:10:f0:b8:
10:66:33:59:2c:05:d0:2e:bc:cd:55:98:ec:fc:43:
71:7a:32:a0:5e:fd:0a:c8:30:62:1e:94:25:69:1f:
a5:48:1d:09:8a:b4:5e:e5:60:94:6b:6e:1a:63:ae:
d3:22:fe:a4:f5:80:2a:56:55:ca:be:cd:41:ed:38:
c8:4e:0b:9d:d5:7c:73:13:ab:b5:4b:04:2e:11:bd:
bf:a1:0b:3d:9b:09:ab:2d:69:81:24:82:ca:e9:fa:
ac:7c:40:4d:e5:7c:63:90:7b:98:33:8a:c0:7d:2e:
3a:d9:11:e3:0d:11:4d:4c:46:53:24:50:68:59:da:
b1:1e:8d:7e:ac:a3:3d:8e:f2:a7:b1:c6:28:e0:b2:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A9:14:23:91:55:CB:42:0D:0D:51:0A:57:5B:55:A6:75:10:22:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e5614a5-b4ca-30d9-8bcc-1dd2cf3e7e81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:92:9a:e2:46:0c:28:2c:ed:eb:d7:bb:92:40:1b:31:73:cd:
84:c6:bc:29:3e:b2:ec:a9:ef:fb:ea:e7:d1:57:2a:28:7d:04:
d7:6c:4c:91:bf:19:81:34:4e:54:47:ab:35:fb:28:db:81:35:
b2:11:58:1b:37:2a:aa:56:4a:1e:d1:15:aa:3e:65:66:94:39:
d5:f7:a3:e9:2d:63:ec:8b:29:f7:a8:e9:eb:51:90:e1:79:d2:
f2:89:01:27:f4:32:92:a3:65:9a:12:af:a7:57:64:d4:05:fd:
3e:6d:c4:42:e2:b6:24:b2:b9:c4:9d:80:a8:4c:13:63:59:97:
27:62:ee:7a:0e:4d:e4:f9:7a:56:db:aa:3d:0f:31:6c:fb:43:
8d:53:3f:7f:7b:93:4e:ba:69:1d:f6:a5:ec:d5:68:55:21:e3:
8c:be:cd:9c:b8:13:48:e6:ee:31:fe:7d:bb:b8:77:90:ea:f0:
b1:a2:fc:ad:89:fc:1e:85:76:87:d7:3a:4e:10:20:f4:9e:67:
ae:e1:40:2a:cc:d1:19:5b:28:72:a2:74:ff:e6:2e:07:f9:45:
58:9d:4e:3b:d0:0f:b1:9c:d0:82:96:18:dc:2b:cf:f7:4c:e9:
0b:62:b6:10:ff:56:ed:20:0d:e9:b5:1c:8c:fb:ea:0f:a4:d5:
5f:b4:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:53:52 2025 by rpki-client