Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa
File: 7c7788c8-0052-3a9f-8848-47f429da02ae.roa (raw, json)
Hash identifier: aCviCrVRNcVlXqoj4BE6D1mczQBdLQyeQCJNKZO+ZwY=
Subject key identifier: 6A:67:3E:ED:B7:1F:8E:24:4B:92:9D:CC:AC:40:D9:C9:E8:A4:EF:E9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFCFE540E847636E110C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 11232
IP address blocks: 2001:470:241::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fc:fe:54:0e:84:76:36:e1:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=68888e05-021b-47e4-a43f-237f7cd62247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:84:94:40:61:8e:79:94:3d:fe:98:f7:6c:
b7:0d:86:b0:6e:52:4e:60:c7:b3:84:54:16:97:ee:
3e:f7:66:64:f0:a4:be:ec:51:e2:33:1e:dd:9e:60:
d6:e3:e0:6c:c0:a5:d6:a7:dc:7b:c2:5f:35:86:c2:
fd:b2:36:f0:b8:2d:77:41:bc:12:48:6c:ad:01:8e:
7d:75:df:98:36:d4:8f:c9:c8:0a:9e:80:e4:09:0a:
ee:61:86:b6:97:8b:ac:ab:d1:61:d1:a3:b3:8a:30:
28:b0:4d:1c:a0:8e:20:a5:ad:34:f1:df:fa:d7:03:
b5:08:15:1b:cf:cd:fd:ad:f3:05:51:b2:18:02:b4:
38:d9:4a:7a:bb:6b:41:c5:82:aa:87:ac:15:f6:ba:
42:4e:61:ca:31:e3:9a:63:68:a1:b9:af:7c:f6:90:
0d:1d:f1:a8:1d:16:87:87:7a:13:94:17:ea:9e:0d:
4f:c4:84:45:58:38:bc:11:03:a2:a6:18:f4:27:ce:
9a:95:23:d6:16:b5:75:44:ce:34:74:b1:de:b1:c8:
ac:69:bc:46:7f:6a:3b:37:6e:26:c5:f5:75:62:a6:
bd:ef:0e:e0:fc:f8:4b:3b:8c:b0:f7:0e:ab:ae:8d:
f5:67:b6:4b:48:7d:d2:35:50:48:bf:97:83:74:e3:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:67:3E:ED:B7:1F:8E:24:4B:92:9D:CC:AC:40:D9:C9:E8:A4:EF:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:241::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:df:49:d3:86:95:6b:b4:f3:2d:59:55:5d:11:74:0b:e8:be:
16:1d:01:94:3d:05:2e:f8:c7:85:0d:69:a5:a3:b9:84:cd:b1:
15:2b:9d:3a:9f:03:13:12:f9:b6:06:4a:0c:f3:53:12:ca:f8:
75:82:22:21:45:51:05:98:0f:8a:77:7c:9e:a7:bb:1c:1f:55:
c0:ff:80:fd:ea:24:71:b0:7e:e6:f3:5d:7b:c0:81:f2:0b:12:
2d:c5:e2:34:60:ba:27:19:f1:66:62:62:3f:18:0d:97:0a:53:
8f:12:66:41:74:e0:6c:b5:b6:cb:cc:05:14:f0:ed:0c:2f:b3:
ce:35:d0:3a:b6:03:39:0a:38:fc:c2:5e:ad:be:ab:7a:9c:74:
81:4d:42:73:cf:1b:e1:79:43:33:ce:35:50:e0:d8:3c:81:37:
b3:74:6e:61:04:a1:38:c2:15:22:21:dd:f6:43:8a:6e:87:56:
96:fa:80:03:8e:26:fa:32:6d:7d:42:1f:74:ea:e1:ae:8e:a8:
c1:45:41:d4:74:6d:61:60:a9:dc:ba:1b:3f:16:d3:81:f5:05:
d5:3e:1a:2c:9b:1f:18:f2:e0:ae:cc:6b:d6:80:0a:63:dd:af:
37:4a:57:83:ed:06:35:9f:a1:cc:63:87:b6:ce:00:7d:c8:50:
0f:26:8e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:12 2025 by rpki-client