Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87b527ac-be61-31a1-9807-99c64b374160.roa
File: 87b527ac-be61-31a1-9807-99c64b374160.roa (raw, json)
Hash identifier: RSqkUro+jq7814ogbie+YDWcOFwDV+8kGA5hh8c0gAA=
Subject key identifier: DA:5F:7A:0D:BF:A3:BA:0F:85:2C:50:87:A3:12:46:44:C7:D4:4D:2F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01B2CDE9721AB31E18744
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87b527ac-be61-31a1-9807-99c64b374160.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 24893
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1b:2c:de:97:21:ab:31:e1:87:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=c5f3d4c1-6a25-4e3a-896c-a901015611f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:9f:76:8a:aa:54:4d:4a:c8:b8:07:71:1a:
b9:53:c1:f4:df:70:43:27:71:b4:48:61:59:bb:97:
86:ca:f2:dd:79:f9:56:a5:39:a3:07:f8:3b:85:73:
68:af:56:25:bb:46:fe:64:66:b0:27:01:41:18:3b:
85:f6:c8:c9:6d:47:68:1d:ec:95:0e:58:e9:9c:49:
72:9b:80:0c:52:fa:64:8a:aa:1c:34:11:d1:b0:31:
ee:e4:5d:3e:38:d6:e3:a9:02:c4:61:31:57:f4:49:
5f:4a:a2:10:a1:a6:69:5f:ec:1a:73:8d:5f:45:44:
c2:11:eb:8e:83:a5:79:b8:b2:78:7d:8d:c4:43:ba:
dc:c6:4c:4a:a9:b2:b7:dc:3d:62:15:4e:7c:95:6d:
ba:24:af:ac:74:01:c1:a1:fd:57:ec:de:a2:34:fa:
73:1d:31:d2:e3:35:ba:1d:37:ce:e5:7e:cb:7a:e0:
4c:5d:55:c2:13:d0:4f:7b:cc:67:ee:af:24:7a:37:
49:35:81:5c:96:a2:9d:55:41:a2:12:4d:29:4d:1e:
46:e6:54:50:55:bc:c1:5c:87:2d:16:3e:99:6d:f5:
17:e3:84:80:6b:6d:a3:aa:c1:9f:a6:8d:af:07:3f:
ab:13:45:b4:c0:2d:3e:84:9d:81:4c:98:fc:59:5a:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5F:7A:0D:BF:A3:BA:0F:85:2C:50:87:A3:12:46:44:C7:D4:4D:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87b527ac-be61-31a1-9807-99c64b374160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:36:df:76:22:b5:09:27:d4:c4:b2:d2:52:a1:ba:7b:03:b0:
fc:34:ba:6a:b4:28:83:bf:80:29:fc:12:ea:26:37:25:0d:d9:
8a:b9:30:20:c4:2f:48:a4:59:50:f9:ee:43:38:51:26:9d:ed:
14:bd:db:d5:fe:88:d5:d6:84:4d:0f:7d:80:48:6b:27:f7:41:
d2:e6:d0:ef:06:13:83:14:bf:60:a5:cf:f5:df:ca:a2:4f:d0:
5e:ee:28:51:06:58:f0:9a:4a:dc:58:d8:d2:57:8f:c2:fe:4a:
ca:f5:bd:4c:d8:0f:c0:6a:50:6b:53:c9:d5:b5:e2:98:2d:e8:
27:84:ff:d5:fa:5e:79:24:bf:c9:23:dd:b9:9f:1f:5a:ab:79:
4c:e2:a4:20:54:65:1e:72:de:e0:63:55:17:a4:47:fb:10:06:
06:fd:bc:6f:da:13:c0:a7:51:20:46:5b:83:6d:3d:59:4c:1d:
1a:b9:3d:5e:8b:d0:7e:33:1f:9f:0f:27:86:2e:2d:1c:9f:0b:
91:08:ae:f2:7f:d7:14:2c:c0:4a:70:f5:09:e1:e7:06:4f:d4:
0e:74:e5:58:66:ab:45:ef:13:9e:d5:65:a5:25:d7:a2:58:78:
63:aa:f9:ec:27:fc:31:e5:d8:38:27:f3:38:58:61:2f:5d:4d:
a5:fd:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:11 2025 by rpki-client