Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa
File: a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa (raw, json)
Hash identifier: VnPfjb/DlkWPRyXHDkTv2hQx4QulAvHaFYMVNyWNATY=
Subject key identifier: 9A:9A:A7:CA:FD:7F:1E:DD:5F:15:38:7A:9A:17:0C:41:85:AA:29:A7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01AA07EACE4A454362880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 198408
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1a:a0:7e:ac:e4:a4:54:36:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=1a2259c3-5577-43a4-b0f3-eccf920064b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:b2:fb:2d:4d:f3:58:6a:01:18:cd:b4:ef:
57:73:73:3f:77:d9:55:5b:99:64:20:bf:f6:62:3e:
cf:85:f0:c2:82:9f:d5:c1:6d:99:ca:e7:fd:f3:fb:
f0:0b:46:bb:6d:88:ff:6b:a1:09:71:c9:e3:64:86:
dd:64:70:10:da:39:ca:47:db:86:b8:b9:26:eb:52:
4c:2f:fc:a2:45:cf:49:1a:2d:a3:45:9c:aa:f5:0f:
89:04:46:51:f0:5d:eb:5b:62:23:d1:cd:9f:77:6a:
63:62:44:fd:64:5d:96:aa:36:d3:a7:e5:52:91:24:
55:ff:c2:81:cc:cd:33:6f:bf:bd:87:ca:e0:23:95:
bb:be:1a:df:89:18:5e:f5:8a:55:f8:c8:39:ec:8b:
35:ab:95:9e:2a:84:fe:17:ac:49:f1:46:31:5f:81:
9f:39:d9:73:27:78:48:a6:46:00:9a:ab:37:82:69:
79:62:5e:19:23:0f:26:8c:68:25:5b:f3:7b:ce:9b:
81:bd:61:68:cd:73:48:b0:12:16:c3:ee:fd:f6:28:
7e:35:d1:b8:69:8b:7f:14:77:36:86:cb:42:24:f4:
a5:2e:fa:fc:bb:59:23:04:5d:93:a6:a2:1f:9c:6e:
2a:81:39:41:10:d3:c2:24:cc:0f:78:4e:ef:cc:fd:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:A7:CA:FD:7F:1E:DD:5F:15:38:7A:9A:17:0C:41:85:AA:29:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:cb:04:34:21:c3:77:52:c9:ae:64:c4:29:7c:08:9a:c9:28:
44:bd:00:68:fb:7c:66:dc:e3:c2:75:0c:8f:2d:ef:aa:eb:90:
3e:14:1c:3c:60:a2:4f:68:d6:8d:86:b0:5f:e9:e9:99:98:65:
a9:f5:fd:03:88:95:30:51:98:65:35:12:dd:4c:1c:82:f1:88:
b7:82:2d:b7:ea:d4:5f:87:b4:0e:e1:24:67:e4:cb:c4:6b:51:
f6:eb:7e:6c:80:b0:c6:04:15:2f:82:68:c3:47:da:ae:fb:f0:
81:99:3d:1a:cf:ac:69:d3:2a:14:ef:cc:d9:f1:d4:b0:a6:97:
17:9f:7e:ba:59:4b:5a:2b:12:31:a0:90:fb:c6:4b:bf:55:d1:
c0:42:aa:af:30:d0:52:42:b4:b3:1d:da:9d:7a:76:6a:ee:b3:
6f:8d:28:95:01:28:b8:a5:34:5e:c8:9f:48:fa:6b:71:73:6e:
71:da:ad:6b:e9:ca:a4:41:1d:55:70:84:0a:8b:60:ca:6c:4e:
0a:6f:64:5c:f2:df:cd:a0:44:e8:ef:c9:fa:b1:80:40:d7:3d:
10:e4:0b:0e:2a:63:ce:ba:12:12:dc:bf:da:8b:a7:0f:ae:56:
dc:2e:b0:7a:a1:bc:30:25:24:cb:22:4c:0d:81:75:ac:93:c7:
4c:6e:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:31 2025 by rpki-client