Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa
File: afe4b7b2-223b-38b1-8752-565def625b63.roa (raw, json)
Hash identifier: b5N2mpEKL414RAjDcPyBUrFNj1hw571snmUsg4vDbYE=
Subject key identifier: 06:E9:B1:8F:9E:5B:21:F6:28:56:81:79:04:AA:8C:04:EE:D9:A9:08
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFDC90CDE1D93F527FB50
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 132046
IP address blocks: 2001:470:25e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fd:c9:0c:de:1d:93:f5:27:fb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=99b9244b-e0f9-40a0-b1b2-a8e9e06a86b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:13:11:d7:9b:7c:fc:95:40:7f:8c:19:0a:
43:80:4d:e6:ef:74:ce:88:e8:b6:0f:98:e7:4b:6f:
8d:1a:26:21:07:b3:5a:51:e0:9a:18:00:9c:b6:58:
2e:8c:38:31:ad:18:ee:4f:07:27:02:b7:f9:b6:8c:
e5:93:35:c3:43:dd:8f:a9:fb:b9:f3:6c:cb:56:e6:
03:76:3a:e1:a9:02:23:00:5c:46:35:ed:2d:d7:27:
b1:01:9f:45:b4:21:49:fc:a2:e6:d7:13:fa:37:6c:
a4:5e:28:25:8a:61:1a:e7:bb:6f:1b:08:e3:c9:70:
6f:0e:46:50:e1:8f:eb:63:64:56:57:77:70:e7:12:
63:3a:b7:ce:44:f9:da:1b:98:67:ec:3a:1c:ef:92:
82:a0:39:df:85:85:60:39:e3:e6:7c:a7:53:78:b3:
6a:7b:6a:31:ea:d6:8b:eb:cf:43:51:06:95:fc:58:
44:27:65:f6:49:08:74:dc:ed:ab:86:d0:fa:38:a8:
34:a4:3e:c8:e6:ab:e5:f3:f5:2a:34:74:fa:bc:45:
70:a0:cf:f6:88:58:c8:43:ed:73:52:24:b1:75:e8:
95:24:af:68:32:f1:72:a3:27:cb:40:cf:4b:85:4d:
61:d7:8b:f7:5f:7d:fa:ad:a2:a3:e3:f0:20:97:b5:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E9:B1:8F:9E:5B:21:F6:28:56:81:79:04:AA:8C:04:EE:D9:A9:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:25e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:24:d9:a8:e6:2a:cd:39:fb:f7:ca:1b:64:8e:3b:07:53:fe:
9b:3e:b2:0a:e5:b8:d0:f8:9a:c0:8d:2e:bc:11:52:a7:d3:24:
fd:95:50:11:7c:60:61:04:23:cf:ab:af:4e:68:6f:29:a2:50:
9f:4d:5e:98:c0:5b:be:7a:3e:8b:10:e8:af:5b:03:49:ab:54:
30:2d:84:ea:d9:b3:32:60:d1:79:55:b0:1d:bb:88:eb:68:2f:
27:61:5c:c7:07:a4:a8:3e:3a:86:d0:5b:7d:dc:12:06:a8:9a:
bd:4f:b0:b0:70:f0:68:71:83:e1:f3:d6:b7:c7:86:eb:e8:b4:
33:f9:99:eb:9f:ce:a0:5a:b2:b9:2f:10:f0:d8:68:e5:6d:8b:
05:fe:a1:ab:85:67:15:31:2a:01:7c:2a:55:c7:64:94:5e:79:
18:e0:84:09:07:73:df:14:66:46:36:2d:62:7e:f0:be:ff:c1:
d6:79:eb:b8:76:69:b2:de:19:fb:27:f8:85:ef:54:00:ce:e8:
d6:26:13:c7:80:65:19:b7:04:e2:fb:b4:d3:a9:8d:2b:9c:67:
ca:b7:97:c5:22:8e:c5:35:a1:d3:cc:f7:33:ea:cd:92:86:2b:
2b:1c:8e:75:d6:c3:30:96:b1:0a:5c:d0:3a:22:6c:4e:bb:52:
ba:95:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:13 2025 by rpki-client