Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa
File: 658691af-bff9-310a-8e0e-981cec48f097.roa (raw, json)
Hash identifier: O9cvFsLwxTU5Cyov9nNKahO5DzxtI/8H0/8NFHsCdmo=
Subject key identifier: 10:E6:09:75:54:EB:D6:FC:79:E6:94:5D:11:C8:19:50:B1:E9:3D:01
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0011B9F9E35F086035F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 206186
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:01:1b:9f:9e:35:f0:86:03:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=81c35e50-2c88-4af7-b2a5-505f237b706d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7c:ff:77:ea:64:87:1e:1c:85:e1:f1:6b:01:
c3:9a:50:1c:67:08:5d:b6:02:cd:e3:09:90:32:c1:
6e:44:79:ea:ce:58:7f:5b:d1:ec:ae:c4:dd:77:20:
9d:55:9d:7c:af:61:83:ba:66:d0:43:d5:0b:e4:1d:
8b:a3:3a:ef:2e:e9:bc:b4:ae:fe:ca:97:cb:bb:54:
b8:94:a5:a9:30:22:62:b6:7a:c6:9c:03:69:3c:dc:
6d:89:b9:00:fe:da:5c:10:eb:40:e1:ce:68:f6:c0:
92:8b:5e:a9:69:b6:4c:b1:c7:2c:e0:df:6d:f9:c8:
1b:20:a1:71:c4:57:a2:15:8c:af:44:59:1f:5f:cc:
e8:32:52:11:5d:4e:97:c6:35:9b:6e:81:bd:32:7e:
ec:eb:25:2d:5f:66:28:89:58:73:c4:51:f2:3b:aa:
e5:60:5a:f2:29:04:a3:17:f7:f0:79:c8:60:03:db:
7f:9c:54:8e:60:5e:f3:ec:3c:eb:d5:ba:f7:6c:94:
93:b1:b2:b9:6c:8c:90:5b:58:8f:09:39:a7:75:c5:
21:88:d6:40:53:0f:04:57:88:a7:3d:17:13:54:9f:
92:1c:53:b1:50:9d:1b:0d:4d:5e:39:5a:0a:74:a4:
73:2e:2a:c8:00:aa:58:d1:35:ff:66:37:69:06:52:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:09:75:54:EB:D6:FC:79:E6:94:5D:11:C8:19:50:B1:E9:3D:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:3f:ea:6c:51:1f:c2:a1:95:ad:cd:21:19:78:de:10:6f:67:
b6:20:b8:41:2b:40:0c:76:a7:7a:c9:89:f8:45:82:02:fb:5b:
63:db:b2:cf:b0:33:c6:cb:0f:23:41:8f:4a:a2:a1:f9:fd:35:
91:9d:f3:b4:d4:0f:8a:25:ee:cf:2c:2b:10:bc:b2:71:48:d5:
90:d9:26:0f:49:e0:f1:f8:40:16:18:9f:b3:c0:02:de:51:76:
6c:0c:be:93:a5:66:8a:d6:a0:f0:97:8e:c0:85:16:f5:f6:46:
1c:1a:0e:78:52:51:1b:1b:d0:d0:c8:13:d4:0e:7f:88:6f:4f:
85:8b:11:10:d3:a9:b0:97:d5:3c:61:51:2a:ee:08:a5:7e:c1:
a2:9f:0b:9a:ee:6d:18:60:73:a4:ce:0d:60:0e:d6:00:c8:1f:
02:34:c4:81:e1:de:0f:74:f2:5f:7a:c8:e9:69:e9:72:7e:bd:
37:de:00:b4:0b:c7:dc:25:72:6e:63:bc:64:f5:8f:9a:4d:f3:
5d:79:45:b7:55:7d:3b:36:1a:4d:8f:9a:98:8f:d8:b5:5c:50:
cb:7f:e8:df:d9:9a:27:d5:4d:26:8f:96:e7:9d:58:a4:fc:f8:
69:6b:28:da:1a:d7:4f:5e:e3:d3:fd:c7:e5:68:83:38:d4:92:
e2:f0:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:00:07 2025 by rpki-client