Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/836d8201-1527-35b8-87bf-5e837035a014.roa
File: 836d8201-1527-35b8-87bf-5e837035a014.roa (raw, json)
Hash identifier: DAAcYfr0r9AMy0NZ/O6KXY97bUTrWgqRv6lIhhoVoXc=
Subject key identifier: 69:12:DC:4C:1C:CB:2F:81:14:F6:8B:72:72:0D:84:0D:A6:2B:B8:D7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00D2010C9E3D9D3C80F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/836d8201-1527-35b8-87bf-5e837035a014.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 396097
IP address blocks: 2001:470:ce::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:0d:20:10:c9:e3:d9:d3:c8:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a3f87e3c-a9cd-4fa7-9125-3470bbd7cf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:52:5f:86:1b:40:35:99:60:e5:90:ca:0f:
00:cb:28:41:e0:74:6d:2a:b4:50:48:47:56:c3:d2:
1f:13:72:df:a1:dd:d6:97:08:fa:0d:b6:26:fb:8a:
e8:c0:9f:bb:06:df:ea:31:8d:52:17:c0:d3:fe:d6:
13:c3:0d:b6:1a:24:96:32:a8:4c:63:73:06:62:84:
40:c8:e4:73:78:01:17:1e:8b:39:11:ce:52:bb:7b:
eb:a4:10:59:5a:59:79:53:9f:2e:53:90:c4:bd:ac:
cd:78:f8:0c:80:7b:f4:92:d5:42:50:b9:0a:36:e8:
37:75:a4:64:d3:b4:54:f6:63:57:eb:40:1e:c4:0c:
d5:f7:d9:27:0c:59:14:d4:ac:03:ba:0a:35:36:07:
8e:06:11:2d:28:99:f5:76:4d:b1:1a:44:41:de:98:
d2:8a:f0:5a:20:83:91:d6:52:9f:9a:21:51:fa:3a:
82:20:e0:d0:d5:bb:33:bb:3f:fa:c8:23:45:cd:e9:
21:35:c9:7c:67:37:8c:71:57:8f:6c:59:57:0e:c3:
da:71:9d:f4:d5:4d:d5:af:dd:95:21:aa:06:1f:92:
ce:6c:62:a3:09:3e:94:35:e0:b3:df:5e:c2:a3:90:
a5:f1:6c:f5:f2:8c:73:02:b7:6b:58:d4:6e:38:ea:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:DC:4C:1C:CB:2F:81:14:F6:8B:72:72:0D:84:0D:A6:2B:B8:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/836d8201-1527-35b8-87bf-5e837035a014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:ce::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:56:44:74:03:38:0b:f5:2b:13:83:6f:cd:b5:88:e2:95:94:
45:2f:98:3c:a8:ff:37:44:5f:2e:5b:28:be:d3:8e:18:56:b2:
6e:27:44:95:9b:1b:ba:64:75:e2:03:3a:72:01:21:f8:92:64:
8a:ed:fd:37:92:96:0b:cd:d6:14:16:8c:87:f3:2b:51:20:d7:
92:0c:41:f4:69:f3:03:17:12:a1:49:5c:69:aa:ea:e7:31:34:
cc:b0:b9:6c:2d:d5:65:8b:c9:a8:e7:8c:7f:c5:46:8c:35:ba:
f3:60:3f:c7:8e:5b:62:a2:8c:f2:6c:9b:b4:9a:29:29:2a:26:
1d:a3:ce:16:87:08:3f:44:a8:5a:33:37:18:c3:38:2f:4c:fb:
af:14:8f:89:67:84:57:a4:f9:d3:47:77:be:51:9e:16:ce:4a:
ae:56:52:ed:b6:2f:4a:bb:7c:2a:c4:eb:3b:84:2c:5a:32:5d:
8f:67:08:87:4a:bb:19:46:c0:f9:66:f8:82:0c:48:19:ac:8a:
11:1d:88:0f:d2:0b:41:09:5a:2f:46:89:61:78:b2:11:35:0f:
79:d2:d2:a3:12:c0:04:82:04:b2:37:b3:42:ab:d8:a0:23:38:
9d:a6:63:2a:80:a1:0b:23:cc:d2:2d:10:c7:fe:03:95:20:01:
89:4e:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:09 2025 by rpki-client