Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/729de64a-d204-37af-8dae-fa420f3c70c5.roa
File: 729de64a-d204-37af-8dae-fa420f3c70c5.roa (raw, json)
Hash identifier: qdzU9NSXX/ydr8o6bNnjmpW/tJSLs0//Wc9AoH9AQwo=
Subject key identifier: B7:52:B5:48:7F:21:DE:2C:EA:23:E6:C1:C9:95:8E:00:98:85:09:AE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D019B1F29BE7EB814CFD40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/729de64a-d204-37af-8dae-fa420f3c70c5.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 13904
IP address blocks: 2001:470:22c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:19:b1:f2:9b:e7:eb:81:4c:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=dd3d950a-5948-4810-aa8c-bd64ca46b239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:eb:fa:c3:51:aa:4e:23:65:4d:d0:cc:84:
76:83:08:c3:87:c2:84:e7:37:7c:de:c6:2e:25:e7:
4e:6b:9e:50:22:b9:03:61:d8:68:56:9f:6a:08:d3:
ab:53:81:df:54:a8:9f:93:3c:af:56:7d:d2:63:16:
6c:36:77:d1:f7:c3:1d:3b:d0:5a:0d:77:0a:99:27:
10:d9:61:ed:02:36:53:c6:cc:d8:33:d2:a7:7e:a6:
90:63:c9:cb:f4:2a:e3:43:d4:eb:d5:f0:c9:85:07:
04:9f:49:ae:4c:dd:fa:28:98:e6:2f:d9:a1:48:2b:
7e:27:ae:3b:11:4f:9a:41:99:ab:46:73:17:40:d3:
79:72:c6:45:3b:f6:d4:50:30:39:1d:85:20:c5:35:
3c:05:3d:2f:50:4f:c0:c2:ba:dc:87:64:b8:a6:91:
42:52:a4:7f:65:9c:19:94:77:57:04:9e:fa:e7:2a:
a7:f1:a1:44:78:d8:57:b1:61:7b:d3:10:34:24:2f:
cc:7f:82:21:a7:79:29:40:82:82:0d:10:e7:72:9e:
34:74:39:af:41:ac:b0:b6:23:02:77:5a:42:2c:ef:
ea:a6:87:f0:11:0d:4a:31:13:35:5e:08:0f:fa:e4:
d7:71:f4:0a:62:fd:af:b2:0b:0e:d8:ef:58:10:5e:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:B5:48:7F:21:DE:2C:EA:23:E6:C1:C9:95:8E:00:98:85:09:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/729de64a-d204-37af-8dae-fa420f3c70c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:22c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e7:7e:c5:43:38:10:64:8e:88:00:cf:be:da:33:42:ee:be:
8b:8f:d9:34:14:b4:87:f6:82:c0:3d:d4:aa:25:4c:08:86:27:
d0:db:fc:ce:2d:0b:7e:81:f1:4a:c8:c7:f1:51:30:e4:20:c5:
39:f6:4d:bf:bc:c2:5d:23:bd:bf:86:b4:4e:fa:11:85:a1:2f:
44:76:9f:af:89:e3:8c:78:77:44:29:9f:a6:75:e0:42:5f:26:
74:b1:46:d7:da:8d:ca:b2:81:62:6f:f1:04:aa:01:0f:38:bf:
12:a8:d8:3c:84:cb:f3:cf:43:d2:77:37:08:16:c4:a3:81:0d:
c0:7d:1d:a1:e2:a0:3c:31:d6:5c:ff:38:f6:09:31:88:18:a7:
fc:fc:42:dd:7f:d0:28:ad:7c:36:5f:9c:af:5f:58:2f:a0:6d:
ac:ec:19:e0:09:7d:29:e2:90:89:33:cd:88:a3:9b:74:86:9f:
26:f3:c3:76:28:cb:ae:17:fa:4b:a0:4f:89:40:9d:7b:d9:ee:
1b:95:8e:9f:bd:e6:d3:a3:45:41:40:3f:e7:15:92:9c:7e:85:
25:90:41:75:d3:86:de:6a:fe:d1:d3:3b:2c:64:70:fb:f5:00:
00:b9:99:7f:96:4a:d5:a7:41:d7:7f:8e:8f:e0:7c:60:8d:c9:
75:ce:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:47:19 2025 by rpki-client