Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75bb0151-7d80-30b3-8774-490f349e1ee8.roa
File: 75bb0151-7d80-30b3-8774-490f349e1ee8.roa (raw, json)
Hash identifier: 90GK7vOjW4qTmwqTn2UU7NvpR3tj1q0wCA69JtN+hHo=
Subject key identifier: CE:8B:07:84:B7:B2:B1:A8:6B:1B:EF:D8:80:F6:DE:45:A3:E2:99:37
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFFC8D745734ED2D81380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75bb0151-7d80-30b3-8774-490f349e1ee8.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 6698
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ff:c8:d7:45:73:4e:d2:d8:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=1b32151b-927d-4df7-84f5-b81ef150f7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:4b:13:9c:3e:97:18:9a:03:00:c9:de:12:
65:d9:fc:f5:ea:3e:de:00:56:16:f5:13:17:52:73:
d4:d8:df:e6:37:a3:34:01:c6:65:5d:d1:ac:ec:34:
d9:ba:16:13:15:b9:84:77:e5:74:e7:bd:92:a3:fe:
fb:73:09:00:f9:6a:a7:cd:30:62:ad:ea:53:f4:7a:
5c:10:c5:1c:cf:d9:cd:2e:cb:12:5e:7d:80:5f:05:
a1:ef:85:28:38:80:ab:4c:4a:d2:ea:21:e2:94:01:
3f:d0:3e:51:7c:90:f4:80:8b:6e:ff:ad:ac:c3:49:
35:c7:bd:08:09:6a:98:5e:31:e1:c6:09:a2:a8:10:
7b:51:56:ef:54:d1:f5:48:70:ef:c2:8f:19:46:73:
02:b5:e0:16:a4:bc:e4:30:d3:15:5c:ea:89:b6:a6:
82:33:61:c3:be:5b:42:2f:dc:b5:bb:bd:71:83:00:
4e:44:22:73:f5:c0:08:1a:a2:6f:a7:87:46:b7:be:
28:7f:59:a9:90:54:15:3d:f6:08:b1:96:7d:f8:f8:
ee:10:1c:04:29:34:12:4f:9c:a0:f3:0f:8b:28:bb:
25:65:fb:80:83:5b:12:ed:1e:bc:b7:92:d6:ab:38:
d9:e7:75:2e:7b:ed:3a:17:c7:26:db:0d:37:22:9b:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:07:84:B7:B2:B1:A8:6B:1B:EF:D8:80:F6:DE:45:A3:E2:99:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75bb0151-7d80-30b3-8774-490f349e1ee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:65:be:8f:d2:e3:35:6f:12:58:7c:e5:7c:ca:66:59:cf:65:
07:75:09:59:da:2d:c2:bb:19:7e:58:db:5d:89:e3:5c:0c:99:
5e:60:c5:f3:59:c0:7e:34:70:c3:41:bd:1e:84:05:ea:6d:45:
ba:eb:8e:f1:1b:0c:a7:f6:d3:00:34:72:74:79:85:a9:57:32:
23:be:6a:3f:57:74:3d:a0:51:46:f4:c2:fe:eb:89:68:00:96:
42:57:59:de:77:56:a9:84:cd:f3:db:50:17:58:98:4f:11:64:
59:e9:60:f5:e2:d6:3c:11:7c:c1:03:13:9a:25:4b:01:34:64:
04:59:7a:c6:63:61:8c:0b:b7:6a:15:e4:9e:df:dd:37:aa:8a:
9c:25:a8:43:fd:56:ad:f7:0a:6a:bd:da:83:26:fc:0d:06:3e:
02:45:01:0a:88:ca:0b:7c:b2:87:6f:31:b0:dc:65:3f:5b:7f:
08:14:34:a7:c0:c7:fb:22:94:fc:6c:e1:ef:ab:d1:b2:f4:10:
5b:a5:e0:d5:18:e7:84:33:8e:2d:97:e0:65:19:c2:3c:cd:5d:
c3:0f:8e:f6:35:70:1f:3a:5b:39:1b:85:a8:fc:4c:94:bc:8a:
64:75:70:6a:34:37:3b:d1:de:da:cb:8b:d5:3a:09:26:37:04:
1e:1f:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:20 2025 by rpki-client