Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94a44e79-a21e-386f-a3b2-3e5059aaf7dc.roa
File: 94a44e79-a21e-386f-a3b2-3e5059aaf7dc.roa (raw, json)
Hash identifier: J4cQI9v3gf9ZWrp5cyJSJ9DO3rOC3/RBxp5AS3bjyXk=
Subject key identifier: B8:C8:FF:DA:AD:F0:D2:59:DD:10:2F:02:B5:66:68:27:FA:4A:89:6D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF73F0AC4497C8D8C6660
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94a44e79-a21e-386f-a3b2-3e5059aaf7dc.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 399668
IP address blocks: 2001:470:176::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f7:3f:0a:c4:49:7c:8d:8c:66:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=da6f5c3f-c55f-4e57-80c9-76f443eff164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:62:c8:f5:f8:6e:ba:3e:7b:45:b4:f4:96:
b6:ac:31:85:6a:5b:98:df:a5:94:74:8d:ef:fd:e6:
5b:93:a1:ff:4e:17:5b:be:1a:3a:45:84:c4:7c:60:
ca:78:23:60:f8:1c:c1:e6:3e:bc:83:3f:58:4f:67:
44:24:7c:1c:34:fd:9a:db:84:1f:bc:5f:83:57:ff:
66:95:9c:f5:3b:3c:0e:91:26:da:38:1e:8a:57:1b:
58:73:cc:91:f8:8c:9f:78:72:94:03:cc:7d:6a:7e:
49:35:5a:17:b0:fa:7b:fc:e1:45:81:21:c7:9c:a5:
fc:62:5f:f7:2a:e3:3b:ce:f5:f8:b2:60:47:4d:bd:
94:67:bd:11:fc:7d:37:73:f0:a8:85:b1:21:98:fb:
02:68:af:fc:bd:72:68:cb:58:f1:9d:65:b4:46:2a:
c2:db:9d:f3:1e:87:25:b1:06:3e:57:05:47:c3:5d:
78:aa:82:d3:75:80:fb:76:d9:67:73:b1:13:fa:fb:
76:16:9a:6f:33:26:62:55:21:1d:36:b6:b7:41:a4:
80:4d:c4:e8:95:44:dd:ea:87:45:34:87:5f:ff:27:
f3:81:34:67:80:6d:ff:a0:78:6f:5e:f5:69:88:53:
9f:66:b3:db:b1:87:fd:48:45:28:3b:5e:f4:b0:23:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:FF:DA:AD:F0:D2:59:DD:10:2F:02:B5:66:68:27:FA:4A:89:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94a44e79-a21e-386f-a3b2-3e5059aaf7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:176::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:6c:c7:30:ae:18:6a:fe:e2:1f:a9:43:60:0f:d2:5a:9d:0d:
52:dd:1c:ce:d5:d0:9d:23:a9:23:c3:ee:cb:e6:f8:1b:09:e5:
c8:b3:5d:7b:65:9e:76:22:be:aa:ad:3f:98:d2:6b:7e:42:c6:
36:98:bc:76:e3:c8:89:4d:b8:8e:58:38:49:84:cb:50:c2:ac:
a1:b5:d6:34:d9:9a:7b:59:33:29:d8:6d:f9:b8:a8:b7:f2:9d:
fd:25:42:9c:a8:b8:5d:d8:c1:1e:20:89:cf:44:a6:9b:9d:e3:
71:d9:dd:95:8e:f6:02:b3:1f:00:8f:be:cc:dd:b1:3b:8a:ff:
62:b6:99:5f:4b:9f:33:e3:80:95:a5:12:91:ae:77:c8:94:f9:
aa:b6:9d:1a:88:34:ba:21:3c:86:3a:98:41:57:32:c9:72:e1:
40:65:e2:fb:03:13:5d:e0:61:5f:0f:fb:dc:33:04:30:02:3b:
44:8c:71:9d:11:19:88:84:c8:20:d9:34:53:38:6b:f9:7a:62:
b2:02:91:90:1c:65:f2:78:7c:2c:d1:c4:f5:2e:0e:fd:e4:16:
bc:db:10:a8:3d:b0:39:5c:7e:6d:c7:bd:a6:7d:21:de:16:e2:
42:f4:ae:24:60:30:f8:cc:0b:cc:f4:b3:72:20:c3:cd:48:c1:
89:9c:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:09 2025 by rpki-client