Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66a9b4c3-ec6c-3606-94e8-f810cc331eee.roa
File: 66a9b4c3-ec6c-3606-94e8-f810cc331eee.roa (raw, json)
Hash identifier: 92NM6PAqXP4aVYJOtrqrB5hjeRFphYMajSFCW5UmpCM=
Subject key identifier: EE:1E:57:D4:BE:75:19:A2:D0:05:96:21:FF:85:5F:07:BA:1F:A5:F3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00572EAD394F897131C30
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66a9b4c3-ec6c-3606-94e8-f810cc331eee.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 394080
IP address blocks: 2001:470:2fe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:05:72:ea:d3:94:f8:97:13:1c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=3414da1e-40a4-46a5-aac2-993c05a11498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:01:0f:d0:f9:8f:f8:57:47:45:1e:73:bc:
67:4d:57:52:97:db:05:ce:7a:a6:f5:06:aa:2f:cd:
4b:b6:be:95:68:0d:67:99:c1:3d:01:a5:51:a1:5a:
49:ac:f2:09:05:c6:a3:c1:53:e6:6b:90:d8:6c:a1:
e8:5e:03:c0:40:cb:7e:a5:cb:0e:df:27:3a:6f:60:
38:3f:33:f5:f1:ad:01:b6:4a:99:82:4b:0e:f4:80:
af:ea:db:05:de:0c:15:5b:fc:77:54:10:02:d4:a3:
c2:e7:af:9c:72:b1:ac:df:07:55:1e:48:25:b7:ae:
b7:3e:83:d7:8c:8a:a1:65:3e:fa:e8:d7:7c:96:bc:
b0:c4:f7:1b:ef:66:75:46:dc:ed:5d:e9:ef:10:f0:
bc:32:ac:33:2e:50:70:6b:d8:38:c5:e6:73:21:47:
a1:38:91:73:66:94:38:10:18:84:fc:10:bb:80:82:
03:6d:f1:8e:e9:16:eb:89:b0:fc:50:84:69:36:99:
74:ae:23:3d:35:e2:ac:c3:63:49:fa:9d:0d:b8:5c:
60:af:ef:0d:ea:47:e4:1d:a5:15:22:a1:a5:93:78:
c2:92:48:fc:24:e3:29:a5:6c:14:99:d3:50:dd:70:
9f:2c:a1:57:85:77:47:b8:9a:f5:9a:f5:86:1e:9b:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1E:57:D4:BE:75:19:A2:D0:05:96:21:FF:85:5F:07:BA:1F:A5:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66a9b4c3-ec6c-3606-94e8-f810cc331eee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2fe::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:d7:d2:50:c9:6f:3c:0e:f5:2c:64:38:b1:43:b2:2e:5b:8b:
2b:b5:ce:33:cb:d0:61:6d:a2:9a:c6:4c:f0:8a:ad:61:84:ff:
34:f4:c3:e9:87:2c:0c:84:75:4a:d1:40:bb:88:ac:8e:59:e4:
69:b8:be:e1:f8:80:c3:ff:05:c8:ec:ab:e9:1e:c5:20:dd:97:
b6:1b:a6:21:84:c5:bb:2f:ce:78:38:eb:14:f5:84:b8:7c:57:
53:91:06:0d:80:ab:68:42:e1:07:48:07:55:f5:f4:3d:28:8d:
c2:3f:69:03:c6:55:ae:b3:aa:c6:b5:3b:8f:d7:41:60:b4:52:
9c:ab:10:cf:85:22:e4:15:2b:14:b9:ae:9c:57:d9:f1:46:cb:
de:5e:d7:f1:33:52:9e:71:a7:3a:17:1b:2e:be:5e:94:ca:61:
38:b4:3f:c4:a1:bf:a2:36:82:8d:db:c4:34:92:69:40:60:af:
17:51:47:02:81:3b:64:55:3b:a6:4a:53:27:22:40:fa:37:5f:
6f:f3:78:76:a0:03:d4:87:d4:a0:67:fe:db:70:ec:15:da:5f:
ca:e2:a0:82:68:0c:9d:5a:d8:61:4a:80:d3:2c:9a:ac:67:31:
b7:24:0f:56:76:b5:2e:b9:aa:66:d9:0d:0d:66:30:ac:7a:7a:
ac:78:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:20 2025 by rpki-client