Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b8ad976-dc92-3090-8ee2-7b40ffc68613.roa
File: 7b8ad976-dc92-3090-8ee2-7b40ffc68613.roa (raw, json)
Hash identifier: PuohXhdK/gC08AVZtofX4Knbvy3YtDC2Rys6rj1uKIE=
Subject key identifier: 84:0D:DA:0C:D4:12:F7:E0:5F:1F:E1:63:C1:AB:0B:E5:FA:39:25:32
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00D3C3C8994E9AD3654C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b8ad976-dc92-3090-8ee2-7b40ffc68613.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 396841
IP address blocks: 2001:470:d9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:0d:3c:3c:89:94:e9:ad:36:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=fc540820-b763-4ecc-abc9-cdf2426dd548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:fc:bb:95:0c:0a:e5:b1:12:f4:60:cb:1b:
81:30:d3:9d:4d:64:a2:96:55:37:06:da:ca:ff:72:
5d:e3:f1:6b:89:cb:4d:e9:dc:00:c1:05:0d:da:3b:
88:21:85:cd:75:6f:1d:47:18:c9:a6:b2:99:a5:80:
68:e6:77:f9:b3:ee:7d:6f:e2:a1:54:89:38:c0:23:
09:33:33:6c:82:14:ee:78:e7:3b:bd:e9:62:ee:56:
e4:fa:bd:69:10:e1:d2:cd:f8:a0:2a:38:c2:38:e3:
60:ba:fb:2e:f5:7a:10:05:da:33:02:58:d8:1c:6b:
4f:27:a7:05:27:c0:c8:b0:07:c9:04:9d:69:6a:c0:
25:60:9d:82:8d:71:38:81:8c:49:40:7f:19:87:6b:
ae:06:6c:23:ef:8d:92:82:e4:e3:7f:9a:12:86:b9:
52:0e:fb:64:0c:a8:68:69:12:67:c9:30:90:b3:ef:
1b:96:48:58:b0:02:08:29:16:d1:c7:16:ca:38:88:
36:35:0b:54:5a:97:f3:4f:e7:cd:71:0e:1b:83:23:
b9:47:26:a5:f2:a5:73:4f:19:e5:75:48:ce:a3:1d:
a3:4a:0e:a8:9d:7d:56:1f:55:d7:7b:1e:33:9d:bb:
ef:61:f2:1c:49:a6:98:51:7a:7a:80:81:b2:f8:8f:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0D:DA:0C:D4:12:F7:E0:5F:1F:E1:63:C1:AB:0B:E5:FA:39:25:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b8ad976-dc92-3090-8ee2-7b40ffc68613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:d9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:1e:67:c3:17:8a:12:19:4d:ac:0a:7b:a9:2f:8e:ab:a1:87:
65:2f:88:da:d6:e0:1d:34:7b:f0:c8:eb:dd:63:0a:f9:bc:f6:
ea:51:7f:c9:63:af:b1:60:ee:a6:72:7b:d7:ce:1c:4c:86:60:
0d:89:5c:65:6a:f1:88:1f:bc:db:78:87:2f:8f:de:07:95:1f:
01:46:e9:15:b6:3e:08:40:53:a1:11:d1:da:a5:33:df:c1:47:
0e:b4:28:23:8d:70:ac:04:50:07:d6:1f:26:e6:43:9a:fa:39:
08:00:03:47:e2:3b:bc:48:04:91:2b:72:fd:ea:42:c2:c7:ba:
cd:76:85:59:23:4d:c0:cd:0b:c0:e6:e6:1e:d1:a4:af:9b:2a:
bd:1c:bc:40:34:ee:39:d1:96:09:bd:78:7d:91:51:c4:21:14:
68:19:f7:18:1b:b8:57:a2:24:f3:16:58:51:64:9e:13:59:24:
00:4d:02:01:f9:f9:73:26:ba:c0:4a:75:bd:42:bb:b5:12:f9:
60:fb:24:06:89:8c:f7:66:4d:c3:86:31:21:f1:96:97:87:52:
d4:da:8a:17:45:ed:11:08:d0:c7:7d:a1:a9:55:49:59:78:05:
34:35:51:e7:fa:c8:81:ae:d4:45:c1:97:18:5b:4b:eb:e5:9b:
6c:11:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:46 2025 by rpki-client