Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa
File: 890c808c-c003-388e-a54a-7300604313f5.roa (raw, json)
Hash identifier: Go/Buh745QSWKMxv2afwlWVxG4nEBCELK7gK64rXO74=
Subject key identifier: 9A:A7:92:1E:7B:1B:BA:50:E1:9F:55:10:E8:E3:DC:BA:F6:3C:9B:2F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01E9CB5EB4C9D3D2C7AE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 13335
IP address blocks: 2001:470:2a2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1e:9c:b5:eb:4c:9d:3d:2c:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=54252964-8100-42b7-b207-9b6787c2fdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:6f:a9:da:6f:e9:0c:dd:1a:0a:01:54:e0:
ee:d4:53:c4:69:22:9b:5f:3d:c1:02:81:99:ac:cb:
db:b8:55:3f:0b:ac:a0:b1:84:8a:9b:f7:e1:23:ba:
39:fc:c9:cb:4d:03:d7:5c:45:ec:77:b5:2a:93:77:
80:eb:f6:8d:f5:fd:99:07:7a:26:84:5d:85:07:f1:
23:12:20:84:3a:73:7e:c9:89:0a:54:5f:be:6b:76:
b0:9e:59:8d:a5:25:0a:e1:3a:58:74:d1:a1:50:f6:
7c:83:c7:63:ad:da:c3:1b:db:02:ee:a0:58:e5:dd:
d9:8b:ed:8d:d1:2e:58:3f:59:09:66:23:3a:be:5e:
4b:85:14:4d:96:02:aa:1b:7b:16:e0:a6:3a:8e:b8:
5b:31:ab:0f:92:b7:36:f7:46:85:f8:0d:f0:76:7e:
65:2f:a7:55:a2:2d:99:3f:40:eb:32:e1:b1:78:f0:
ab:a4:c6:34:e5:91:3c:be:4f:eb:94:b2:51:03:c9:
1a:f3:b1:fd:22:eb:fb:c7:86:70:2a:8f:7a:92:90:
cb:c2:8c:cc:17:17:71:06:ae:2f:e0:3a:27:11:87:
bc:d8:b6:56:94:f0:bf:3c:71:27:c7:bc:0f:15:9c:
9c:9c:ee:53:7a:e5:34:4c:0f:68:7b:2c:13:39:a3:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A7:92:1E:7B:1B:BA:50:E1:9F:55:10:E8:E3:DC:BA:F6:3C:9B:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:fd:aa:46:56:63:fe:aa:5b:a9:96:3d:6a:15:24:d9:57:20:
d9:89:1b:8e:07:c1:32:08:10:ad:21:b9:ca:8e:64:f1:fd:7e:
fc:1d:ed:2b:f5:b2:bf:99:20:40:dc:c9:3c:9a:2b:ab:4e:03:
0b:a1:4b:44:88:49:27:a8:fc:50:b0:52:ef:3d:e8:0f:05:d9:
73:39:df:2a:8d:e9:02:38:b4:48:82:d1:78:09:c1:cb:eb:52:
66:b8:b9:03:23:33:bb:a2:31:f1:bc:93:e4:23:75:93:92:63:
b2:e7:fd:db:1d:d3:e9:76:c6:4a:e9:0f:ed:1a:8a:ea:fa:8c:
22:7d:d5:a8:4c:50:05:4d:5b:31:89:38:ca:56:73:12:f8:75:
3d:89:84:bc:23:0b:ad:11:cb:13:7a:fe:67:bf:1d:19:ba:35:
da:6d:f6:79:2a:0c:5c:9e:65:6d:61:38:06:a7:e1:54:d3:dd:
4b:9c:1f:89:7a:09:76:7c:75:57:9a:30:75:f5:bc:01:72:a1:
82:6d:3f:f2:3f:11:fb:aa:7b:17:bc:e8:5c:12:2f:02:eb:79:
3e:0a:82:fb:a8:ef:b0:2f:27:65:e2:e1:2a:2e:e1:d0:da:6b:
05:97:e6:d1:22:53:c5:d3:3d:9c:f2:58:2f:31:ef:d5:73:8a:
cc:1c:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:05:50 2025 by rpki-client