Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9368d032-7556-39a7-bdc4-9aef186f4f9a.roa
File: 9368d032-7556-39a7-bdc4-9aef186f4f9a.roa (raw, json)
Hash identifier: 80bTKgou965LAUM9ovdHAc8BNQE3BHMLfRI/nPo3brk=
Subject key identifier: CE:23:2C:16:E2:BB:47:3F:CF:60:24:01:5D:C3:B2:D5:E6:DA:40:4A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D002FE13A7FAD168CB3C70
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9368d032-7556-39a7-bdc4-9aef186f4f9a.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 64122
IP address blocks: 2001:470:2bd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:02:fe:13:a7:fa:d1:68:cb:3c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=4279ce0c-aa07-4db0-866c-625da209f2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:25:38:fe:2c:0e:e5:32:d2:c5:52:88:e3:
8e:de:80:0c:a4:d3:3f:b6:e8:38:37:66:8f:93:14:
d6:81:2d:0b:a9:15:00:e2:ef:24:3d:55:6c:a3:72:
7a:e3:58:93:a6:9a:27:8c:cf:ad:5a:07:4d:29:f1:
5f:0b:48:d5:18:cc:08:1a:39:62:4a:4d:24:24:a1:
ce:9a:cf:b7:19:34:82:5a:a1:f6:07:a2:fb:76:d0:
66:49:33:6e:3f:23:8e:bb:65:d0:11:fb:8e:3b:1c:
1b:ed:09:80:74:b0:e5:00:8f:14:92:fe:9b:79:76:
9e:59:0c:26:31:a6:2a:a2:93:6a:ce:b9:ad:8e:17:
b8:4f:53:6a:84:af:87:7e:58:10:34:3b:3f:04:34:
d7:50:22:9e:0f:c5:c0:e1:0e:a7:71:9c:77:73:2d:
f5:4b:33:b5:8e:15:78:9f:13:e1:b5:00:a0:a3:fe:
d7:52:53:6c:6f:fc:56:3c:28:15:d1:80:10:14:2d:
4e:23:8d:4a:d4:7b:b7:d1:6f:88:7c:75:c6:8e:b3:
f5:0b:e7:db:87:68:bd:c2:02:46:c1:c9:98:52:c7:
67:0f:a0:da:50:56:c1:6b:31:dd:c8:85:ae:68:e4:
92:07:aa:5b:d8:56:0d:69:75:3c:f9:5d:24:fe:df:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:23:2C:16:E2:BB:47:3F:CF:60:24:01:5D:C3:B2:D5:E6:DA:40:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9368d032-7556-39a7-bdc4-9aef186f4f9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2bd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:18:f9:44:78:21:5b:c6:0a:19:48:64:03:0e:71:7e:3e:e8:
41:26:92:e3:20:61:20:5d:bc:e1:30:ac:ad:bc:a0:42:b3:97:
56:76:63:fa:13:ee:92:2b:60:ed:e1:ed:3b:2a:2e:33:a2:a4:
c2:9e:1f:2a:9f:1a:6f:68:f9:f8:17:09:18:b1:fc:a9:7a:de:
b6:8a:05:53:cf:c1:c8:92:2e:99:77:01:95:07:7e:9b:dc:a9:
76:4d:65:26:5b:96:f9:09:62:f0:e4:fa:a3:a9:3e:bb:52:c4:
3f:2a:8b:54:39:73:c1:93:40:44:4e:36:4b:3c:7c:5e:75:b2:
ff:ef:7c:81:48:da:18:1d:03:1c:15:bb:39:ae:f9:5e:d8:ee:
07:a1:e4:52:da:46:a6:f2:a3:03:3c:6f:38:15:53:24:76:39:
cf:7d:8e:f6:be:85:17:39:65:da:69:17:ed:b3:34:ac:e5:66:
44:41:39:a8:53:8f:e4:30:98:58:2d:11:30:38:4e:77:76:bf:
f0:ac:6f:59:9f:4c:a9:4f:9b:bb:39:6f:cf:ea:da:c7:e6:66:
22:f1:d5:4e:ab:aa:4e:82:fa:25:49:b1:9a:d4:71:a3:56:35:
aa:9c:b2:97:c1:6c:5d:b3:c5:1d:56:e3:13:9f:c6:95:5a:0d:
06:86:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:19 2025 by rpki-client