Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/964e4a18-25c8-36e1-8beb-645d7ee13fba.roa
File: 964e4a18-25c8-36e1-8beb-645d7ee13fba.roa (raw, json)
Hash identifier: sMP0aRXCivGVzrfQSIZ1YrRlZ+V0SKC/UbeptCQNVLs=
Subject key identifier: 1A:C3:C5:EC:53:33:4E:EB:A7:7F:88:54:90:11:8E:AE:82:5F:91:EA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584858A0420D5AC2BBB3A053C3C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/964e4a18-25c8-36e1-8beb-645d7ee13fba.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 210805
IP address blocks: 2001:470:3a5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:42:0d:5a:c2:bb:b3:a0:53:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=3582adf3-c102-494a-837d-2861b3bebea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:bc:08:76:65:66:f1:27:05:22:f2:de:3f:
22:a4:a4:9c:79:e9:0b:ec:db:3a:09:3e:f1:66:2c:
0f:94:65:47:c5:82:c1:3d:0f:20:95:d5:7d:9e:49:
10:3d:be:2a:f2:98:20:aa:7f:9d:1f:46:77:41:e9:
14:b6:aa:3c:4b:38:4c:0d:c5:42:14:02:11:23:ea:
64:d7:4d:42:1e:b3:3f:de:4e:28:db:87:79:19:24:
49:d7:68:e7:fe:ed:ff:d7:a3:89:37:ac:ef:ef:70:
30:2c:24:16:10:06:c5:19:3f:d0:71:74:36:fc:a6:
a5:68:d4:2d:7d:19:93:ea:bc:9f:d6:03:7a:6d:0d:
c6:5b:42:50:9e:31:ce:22:fc:69:d2:72:33:a4:27:
d0:c2:95:f1:83:0b:e6:bc:da:34:22:ed:5e:a9:66:
bd:dd:8b:e8:d1:fd:f7:2e:d8:61:aa:b0:36:8c:ca:
68:20:7d:5b:17:f9:6e:ad:38:4e:da:ad:16:be:b0:
3c:94:01:b3:19:f6:a4:f2:56:42:ce:ad:70:d7:fa:
b4:07:db:0b:81:7c:61:e0:c0:d9:34:8e:8e:da:ea:
6b:3c:9c:6c:d4:93:42:88:c8:cc:20:f2:4d:48:2d:
29:b7:6f:7f:e0:94:8c:d1:c3:2a:24:6d:87:0d:9e:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C3:C5:EC:53:33:4E:EB:A7:7F:88:54:90:11:8E:AE:82:5F:91:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/964e4a18-25c8-36e1-8beb-645d7ee13fba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:4d:fd:4a:a5:2b:68:1b:a6:9f:07:be:18:e3:15:31:f0:8d:
ac:60:f7:b7:8a:70:ae:66:d8:ae:12:7c:4d:90:1d:21:75:96:
b1:10:09:da:e3:a4:f1:81:31:28:85:7d:2f:e4:68:92:f7:7b:
2a:06:04:0f:9b:27:ae:72:70:39:a0:9d:71:25:c5:35:35:40:
1d:95:4e:63:29:fd:ac:0a:7a:78:2e:e4:9c:0d:c3:42:1d:e5:
23:a8:53:a2:14:d2:a1:c6:17:8e:00:9a:8f:3e:a3:43:24:9c:
c6:63:fe:67:b0:e5:e1:a3:ce:ea:31:7e:b4:33:33:d7:63:11:
03:36:1b:95:83:3a:8b:40:c2:13:c2:3e:69:32:0b:fc:45:0e:
f4:f1:64:58:04:7f:bc:ec:b6:ad:59:e0:99:d4:27:e3:21:55:
c8:ad:9f:db:c5:37:8e:92:26:84:3f:e1:7b:1b:53:48:40:d1:
b7:84:fd:02:ea:39:84:26:ba:0d:12:a1:a5:21:3e:b5:5d:7c:
51:85:61:55:f5:31:93:fa:b8:27:89:43:0f:d0:7e:e1:07:9b:
e7:2e:97:fc:31:55:85:66:92:19:8c:33:b3:06:72:b6:99:df:
61:97:f0:2f:80:92:dc:13:8a:3d:e2:93:6a:36:b9:11:c5:81:
2f:ac:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:26 2025 by rpki-client