Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/896ae23e-3e6e-365c-ba87-1d5bc51f4a86.roa
File: 896ae23e-3e6e-365c-ba87-1d5bc51f4a86.roa (raw, json)
Hash identifier: wMM9HMNCGW2O4MbI2+Il/Jvc8VY8FQBxmXkl9UH0WQU=
Subject key identifier: FC:E0:C0:30:48:BC:DE:5F:1B:22:61:E9:37:B1:F2:3E:E8:62:DD:13
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFED83956C492B2C2D4980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/896ae23e-3e6e-365c-ba87-1d5bc51f4a86.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 395127
IP address blocks: 2001:470:e9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ed:83:95:6c:49:2b:2c:2d:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a0886039-ce7f-4def-9b58-260d8e877371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:16:54:1b:b1:45:26:35:13:d5:91:8c:31:
c3:92:57:2c:89:76:7a:34:54:2c:d5:38:b9:f0:62:
19:64:fc:fd:61:d3:13:d0:fb:1b:a4:25:35:94:5a:
f3:02:17:05:cb:90:35:72:59:61:f5:2c:0d:a3:b0:
c8:97:f3:c4:1b:24:40:6a:2d:37:38:c6:6e:7b:1b:
5f:0d:1b:48:ee:29:c7:4e:33:3b:d6:dc:92:af:9f:
8a:d7:ad:f0:bc:d9:b0:09:6c:68:8d:65:d5:a8:38:
30:ff:da:61:82:e4:65:a2:57:93:46:1c:37:60:ad:
cd:be:f0:13:68:b5:d7:25:26:0b:cd:5f:d6:2f:13:
10:a0:42:cf:c1:96:97:41:9a:fc:f0:15:8b:aa:c4:
e8:12:19:d2:79:76:d1:0e:87:b7:02:42:74:93:c5:
df:d7:63:17:f3:a0:a9:93:c9:6f:6e:ce:15:5d:bf:
67:44:a8:37:52:2f:f4:65:2c:08:b7:ea:89:df:ed:
0c:67:10:ef:cd:23:95:90:02:82:61:e5:bf:a4:80:
57:47:f5:29:d0:fd:fd:0c:55:43:07:75:c2:b1:dd:
67:b3:6e:2c:1f:d1:71:c5:06:a8:64:91:3e:03:45:
e1:6d:31:05:9d:1c:bf:8d:42:27:28:80:45:f1:2c:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:C0:30:48:BC:DE:5F:1B:22:61:E9:37:B1:F2:3E:E8:62:DD:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/896ae23e-3e6e-365c-ba87-1d5bc51f4a86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:e9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:f6:fb:9a:ae:fb:5d:b8:d8:4c:35:e5:8b:22:63:f1:63:34:
03:ee:ea:df:51:94:0c:31:a0:c4:60:d9:7a:b0:5e:bc:ba:16:
73:8b:c7:b9:82:13:5b:e7:93:1a:8d:bd:53:74:02:88:73:81:
21:24:ab:fd:30:49:0b:fc:3e:73:be:42:7f:4d:f6:be:05:84:
a5:b2:0c:5d:d1:ac:d0:bb:bf:8a:99:a3:37:ad:9a:88:23:e9:
3f:fc:ac:0b:0b:0f:62:19:ba:da:f6:4d:ed:5a:33:83:af:bd:
0c:60:cc:59:da:5b:98:cf:dd:47:63:b8:48:b8:65:83:84:97:
e9:b5:6b:a1:f7:af:71:74:d7:02:51:65:15:f2:7b:38:98:53:
bc:d7:be:27:2c:3a:9b:cf:59:e7:9e:58:67:80:7d:4e:25:2c:
ed:64:71:c2:b9:2c:ba:b1:d0:00:3c:c8:fb:0e:73:e9:94:88:
4b:73:98:fd:98:19:34:38:ac:31:a0:b1:6a:06:36:b0:0b:74:
d3:e8:11:95:21:c6:31:28:b9:ee:82:f1:4f:74:b8:02:ef:37:
e6:04:d4:65:84:e3:0b:95:5c:83:08:e2:5b:2d:b2:c5:b8:bb:
20:55:2e:35:66:c0:0c:cd:30:fb:c9:88:8b:a3:d5:b6:93:a0:
c9:dc:78:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:43:14 2025 by rpki-client