Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94731fee-e31c-3a2e-be15-ba0e86cd9078.roa
File: 94731fee-e31c-3a2e-be15-ba0e86cd9078.roa (raw, json)
Hash identifier: LMaAoV0GyDFbuNslqCKSq9Jno+Oo4x7dRTTDMKSllzM=
Subject key identifier: C0:76:B3:69:C7:5A:83:84:57:41:97:3B:AE:E4:81:E6:EB:5F:78:A7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D002BA5954237958863680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94731fee-e31c-3a2e-be15-ba0e86cd9078.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 6698
IP address blocks: 2001:470:2b4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:02:ba:59:54:23:79:58:86:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a19c6061-0eb1-419b-a375-2e6564812d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:8f:98:af:78:f6:6f:31:d9:b2:9f:d9:35:
ea:c3:da:ed:aa:44:cf:6d:0f:13:1c:f8:6b:e8:78:
5d:9e:83:69:1b:d6:6b:22:d4:1b:34:01:34:41:11:
a5:1b:1c:2d:69:bf:0b:2f:0b:f1:6b:82:10:ad:ef:
83:71:d0:0c:ea:a7:e5:9d:d2:44:67:14:54:3c:43:
57:65:a4:47:4d:20:75:1b:09:46:8d:13:56:47:7c:
69:dd:30:ec:c1:4e:a0:81:70:c2:ce:87:93:0a:13:
2b:2c:37:50:99:d8:47:28:3e:fe:84:53:64:c9:1c:
7d:38:13:9f:93:d6:0e:27:62:d4:d4:07:2f:7b:d9:
3c:a4:bc:05:f7:85:4b:92:c5:6b:27:c3:79:8f:df:
2e:5a:30:da:6b:51:50:e7:57:3a:a9:30:8f:6c:7e:
96:de:8a:2f:42:a4:9d:21:2e:c7:c2:33:4b:c7:6e:
45:40:3f:7f:c3:1e:09:ed:6c:7a:20:8a:21:9d:5a:
8c:0b:0c:90:f2:78:f6:75:f5:cf:81:ac:5d:06:f1:
c0:d0:49:46:7c:d7:88:ff:cb:90:9b:a3:f2:04:6e:
85:b5:5c:91:c3:00:59:27:77:aa:f1:0b:27:f1:0c:
a5:34:71:47:64:8c:2b:75:f5:60:67:a8:c7:a7:7c:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:B3:69:C7:5A:83:84:57:41:97:3B:AE:E4:81:E6:EB:5F:78:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94731fee-e31c-3a2e-be15-ba0e86cd9078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2b4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:6a:fb:99:46:e1:58:10:87:f0:21:93:72:99:25:8c:87:f0:
1d:5d:b3:fa:6e:50:ae:f8:c7:eb:38:20:87:37:3a:0f:9e:0f:
36:5b:67:11:e2:92:10:22:b9:8f:ce:fb:56:33:80:f5:7a:78:
ca:f6:42:24:c9:d0:a0:84:f9:5c:78:4a:89:74:2a:b6:c9:62:
50:d6:4b:a0:2a:b5:16:2a:0b:f9:1d:d0:c1:fe:30:67:f8:e8:
7d:f9:f5:32:c1:ca:d2:2c:9e:d8:ce:5b:8d:94:9a:b0:3a:68:
b7:4a:38:23:73:9f:f3:6f:54:1d:3b:ff:66:51:3b:39:8d:1a:
18:fb:ce:36:1c:b8:cb:71:c7:1e:63:6a:ed:f1:ea:3f:44:cf:
65:a4:5a:82:9e:3b:42:d2:ed:86:31:cf:5d:24:e8:75:17:1d:
d8:6a:04:86:be:03:5d:ff:da:17:70:c3:5e:ed:ed:2b:87:6f:
1b:e4:1f:75:92:3e:83:d8:e5:7a:d1:86:4b:44:f6:00:8e:56:
95:24:1f:e3:3c:0c:84:6a:05:36:62:f5:b2:86:a0:2e:04:bf:
c3:20:00:e7:f8:26:c0:ad:f4:ea:a9:11:6e:4a:00:b7:19:b2:
70:37:11:82:0c:48:5b:43:56:c5:72:ce:b3:09:36:e8:d0:d4:
0f:83:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:28 2025 by rpki-client