Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa
File: 85e30730-5d37-3d0d-b82f-934337806577.roa (raw, json)
Hash identifier: x5YFRZZhg+KYpbs4pXpmJd0VDA/MoGpzhMm3+DEDlWI=
Subject key identifier: 6F:63:E2:C4:2D:17:B7:3D:BA:5D:56:33:BE:0B:DC:02:B1:C7:7D:47
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D02100BE5F8A28EC3CF380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 395260
IP address blocks: 2001:470:2f6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:21:00:be:5f:8a:28:ec:3c:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a2471dd3-4e9b-4ac8-b3cb-294279ee4d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:a6:23:48:ef:1e:2b:cb:09:d6:a8:53:20:
05:6c:b1:0c:cc:b0:17:3e:ae:f8:2a:d5:25:b1:ec:
7f:8f:69:99:7b:ca:61:4e:c3:dd:e2:24:8e:53:28:
a6:e3:a8:98:f9:2a:50:54:c6:6c:5a:77:04:60:58:
76:99:84:46:bd:47:f4:8b:9e:75:c4:29:92:8c:06:
68:14:a0:e2:26:54:4a:3f:c9:48:fd:c4:9f:41:32:
29:d6:53:08:0a:5d:b4:54:0c:30:be:56:43:84:b9:
27:79:ee:2f:a2:74:e0:fb:27:b5:84:b1:dc:09:d0:
fe:ee:17:ff:2f:81:25:4d:ee:9d:66:b9:a6:66:9d:
9c:c8:d1:7e:f9:d5:7e:7e:76:1f:99:fb:52:2a:c8:
e4:db:94:30:85:1a:9a:eb:f5:9b:e2:c6:4c:af:44:
20:07:18:89:6f:05:94:cd:32:6e:82:fa:4e:b5:17:
21:72:18:2a:23:8d:7d:f5:0a:30:91:a8:b8:be:a0:
f1:0e:eb:0f:2b:38:6e:8e:2e:17:b3:d6:0a:e2:7c:
92:35:1f:fc:a9:b5:63:dc:d0:06:0d:b1:7e:40:58:
b4:4b:78:a9:a7:d7:a7:c8:cd:43:bf:bc:25:25:32:
78:48:68:4a:08:0b:ad:af:d4:36:91:a3:07:47:7f:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:63:E2:C4:2D:17:B7:3D:BA:5D:56:33:BE:0B:DC:02:B1:C7:7D:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2f6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:9f:b7:12:58:1b:1b:9d:ef:fc:00:bf:4e:d6:9d:f8:05:dc:
5c:f6:d9:4e:e2:ab:00:c1:63:f5:0f:eb:95:f4:2b:ca:2b:99:
ef:2d:c1:d1:42:aa:b7:39:bc:e4:2c:8d:11:89:5f:c2:01:5d:
d8:6a:b4:8c:57:29:81:a3:14:29:f3:1e:5e:5f:5e:fc:46:c0:
12:f3:df:d9:a4:9d:9a:dd:a9:a2:20:35:f5:84:be:74:12:16:
40:0d:9f:c2:2f:8d:6e:fc:c4:b9:0f:d2:55:ea:01:8b:32:9f:
52:71:9c:12:80:59:7d:f9:ec:92:ba:ee:aa:43:6c:3a:67:1c:
5c:a3:08:dc:a9:15:61:20:6a:8a:26:3e:43:67:3d:41:c2:93:
df:ad:5e:f5:02:5a:38:4c:a7:dd:f5:c6:30:de:33:e7:fd:13:
8e:5a:30:06:1b:9a:07:0a:34:ef:82:5c:4e:b6:98:76:68:8d:
2d:77:06:6b:5d:49:ad:93:b1:db:04:25:01:fc:9d:c3:36:91:
d4:43:39:a6:28:d4:0a:c0:c8:2b:fe:f1:21:a1:66:6d:5d:22:
41:81:12:c0:6a:fa:e6:60:14:14:69:1c:97:fe:db:ba:15:b5:
34:57:be:4a:a7:8d:2e:5c:cd:6e:45:b0:10:b1:6f:ef:10:8c:
6a:47:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:01 2025 by rpki-client