Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7db086-522f-3a79-aa84-0f18611a1865.roa
File: 7c7db086-522f-3a79-aa84-0f18611a1865.roa (raw, json)
Hash identifier: 9UduFIOSU8HYaKWq/xEh9UhvrAaV95qAEKREuCpAdZI=
Subject key identifier: CF:8E:2E:7C:33:DE:BA:AA:B8:A0:B5:7E:9E:B3:4F:60:21:8C:60:2D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584815A0005B220AC5DE4440D900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7db086-522f-3a79-aa84-0f18611a1865.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 133322
IP address blocks: 2001:470:326::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:a0:00:5b:22:0a:c5:de:44:40:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=7ee4837f-fcf7-438c-a0cd-af475990e3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:bb:3c:1a:22:31:75:a2:b3:fc:0f:6e:4f:
ad:1a:a8:8e:1d:66:0d:92:6b:26:33:62:8c:97:64:
61:bd:de:7e:9d:4c:74:1a:87:86:9a:09:1a:03:37:
25:92:a7:97:21:c4:41:46:fe:8b:cd:4b:0a:d1:fe:
95:e0:b2:08:b1:3c:17:a5:18:d3:4e:ea:1c:32:53:
eb:e5:9d:ae:e5:ba:7a:6d:48:06:75:67:e2:c9:43:
6e:56:b2:bf:4b:90:78:b7:7c:a3:d1:b0:1c:0a:ec:
15:bd:3f:57:b5:75:3c:69:bf:a6:a7:1c:9b:d3:d0:
84:80:9e:6b:49:62:d9:19:7a:40:79:1e:3a:9e:c4:
80:b2:c5:0f:65:0e:71:91:7f:59:e1:3e:59:07:91:
62:1b:fb:fb:c9:5d:96:68:53:ad:69:e4:76:4b:38:
fb:d6:d9:65:d9:9b:e6:c5:bb:96:cf:2f:65:75:15:
d1:84:d8:11:26:ac:5d:36:24:b8:79:1b:0c:4d:18:
56:cd:39:17:48:d6:ad:d1:52:60:9e:e0:c9:0f:1e:
cf:7f:05:fe:e8:6c:9c:c6:dc:8e:37:13:90:15:22:
72:6e:06:a4:a4:8e:7d:16:89:b6:e2:96:e2:86:8b:
95:87:46:29:1f:72:0d:a8:99:82:a1:92:33:8b:87:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:2E:7C:33:DE:BA:AA:B8:A0:B5:7E:9E:B3:4F:60:21:8C:60:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7db086-522f-3a79-aa84-0f18611a1865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:326::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:85:7e:fa:4a:9c:e8:a4:70:c6:6c:34:16:ce:f6:3d:40:da:
55:31:47:cc:d9:28:d8:8a:70:6a:98:24:16:51:d5:66:81:b7:
19:82:2a:12:06:bc:fd:7e:9c:76:1c:ab:b6:22:cf:8f:22:e1:
7c:d7:83:ef:87:a3:83:11:17:db:97:be:44:19:b1:1d:8c:0d:
53:64:b8:1b:27:c4:5a:75:98:68:8c:97:d5:c2:fa:54:d0:51:
e9:2f:5a:94:f0:83:82:8f:35:f3:82:bf:21:30:d6:df:e6:40:
e6:84:ec:6e:27:6e:fa:67:f3:ad:18:ee:9e:44:2a:5c:33:5a:
78:19:19:41:08:c7:17:db:d8:08:ca:48:9c:3a:a1:3e:39:da:
27:01:ff:dc:3e:af:b8:db:e6:d0:1b:17:b5:9f:fc:cd:bf:0e:
d7:7c:70:56:6b:24:5d:5b:30:7f:b8:41:3f:ad:28:ce:86:89:
07:96:b1:e9:cc:dc:59:a7:38:62:d8:b1:5f:4a:83:fc:42:a7:
d7:58:84:d2:6a:e2:62:ae:79:4b:d4:d1:db:08:cf:50:2a:ec:
0f:68:35:71:51:4b:56:72:33:85:55:cf:5a:3f:fc:3f:7a:f3:
b9:57:88:3a:eb:78:85:74:5d:a1:e4:30:da:8f:b6:16:15:2d:
db:96:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:18 2025 by rpki-client