Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7c639c8-15de-350a-8dae-e4b61f919db2.roa
File: a7c639c8-15de-350a-8dae-e4b61f919db2.roa (raw, json)
Hash identifier: RVhpEy2tQ16vV8lI5H6/mJt9UZba1X1eLWXYOCmWZxE=
Subject key identifier: F0:42:80:D5:D1:10:FA:28:7A:D8:86:C7:5C:02:3E:97:EE:95:90:7B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00151D10A45C8BB5C44B8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7c639c8-15de-350a-8dae-e4b61f919db2.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 30886
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:01:51:d1:0a:45:c8:bb:5c:44:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=bf2ea9b3-2cdb-4590-a11e-cc10136ada4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:af:bc:a8:71:ab:6a:29:b8:cb:dc:96:3d:
54:b7:5c:a7:bd:37:73:c1:a2:7c:db:21:9f:86:b0:
66:9c:4a:7b:b5:d0:80:25:10:ac:9f:97:fb:16:22:
f2:29:45:08:98:39:35:76:51:18:6d:12:9b:a1:2e:
1a:52:c9:59:93:31:92:75:7b:76:18:18:45:8c:91:
bd:a7:90:bf:ef:8e:58:63:6e:bd:88:9a:0f:4a:d5:
47:ff:d3:39:3b:20:d2:81:f9:83:9d:64:98:78:4b:
e5:1d:0c:db:5b:6c:5d:e6:ee:b8:a9:01:54:ee:2e:
cf:38:cc:24:2c:7f:ab:e9:14:b1:33:4c:9b:54:22:
ad:aa:53:4f:29:ff:eb:57:fd:6a:03:24:23:b5:e6:
45:a4:68:9c:4f:d9:59:74:d3:2e:5c:80:8b:15:3e:
08:d8:18:c8:65:af:41:39:0b:65:a7:8a:b0:b4:6e:
57:79:b0:70:24:f3:7d:88:45:99:48:76:1e:16:18:
5c:91:0d:c4:6b:20:6d:64:22:7e:ac:a6:53:53:02:
1e:df:c7:71:e2:d3:85:02:5e:f4:d7:89:bd:fa:33:
5e:0d:51:0d:5a:32:f0:ed:57:1d:a0:1c:d3:de:e8:
ca:fe:56:ec:88:93:5f:20:5c:f3:a4:9f:58:29:10:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:80:D5:D1:10:FA:28:7A:D8:86:C7:5C:02:3E:97:EE:95:90:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7c639c8-15de-350a-8dae-e4b61f919db2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:ef:e8:29:b7:b1:4c:69:2c:61:53:46:3a:6c:d1:a2:51:7b:
e8:8c:ed:be:17:e0:42:bb:c9:f9:72:05:95:3f:86:5e:33:f8:
01:01:f8:30:38:b2:08:b9:2f:27:c6:fe:2a:7e:ec:9e:a4:1d:
c1:cd:77:47:05:32:d8:f6:cf:51:2a:9d:27:69:4e:ff:3f:c9:
78:64:78:c3:10:2a:8c:76:de:94:c6:fe:66:d4:28:8b:69:fc:
35:ea:d6:12:c9:6d:44:02:40:a5:64:40:89:da:bb:b2:76:79:
d0:e0:45:0e:4e:2f:11:1f:d4:22:22:02:8d:f1:84:a4:c9:2d:
2f:1b:f9:44:00:69:c4:c9:7f:ce:6c:f1:81:cc:5c:22:46:0f:
0d:1f:75:f6:2b:46:64:48:82:c7:9a:bb:03:61:96:dc:74:87:
8b:f8:65:10:9b:8a:f6:1f:c5:9c:75:6d:12:7a:11:ca:34:d9:
97:a9:b7:b4:3d:0b:e4:f3:11:a0:1b:cb:34:75:a7:3f:87:93:
03:07:7d:58:09:aa:0d:2f:a9:59:9a:7b:4e:33:05:a7:14:25:
aa:78:f8:98:4b:29:25:52:18:ef:2d:87:dd:b7:ce:00:19:ec:
aa:ac:7f:f7:37:72:34:a5:45:1a:39:e0:25:3d:a3:e9:9d:1d:
da:0b:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:43 2025 by rpki-client