Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b13adc0f-bd07-369e-8093-86bd80bbd1b5.roa
File: b13adc0f-bd07-369e-8093-86bd80bbd1b5.roa (raw, json)
Hash identifier: TKp9C9K+95tp5wuuQPlNMXc1ErIvbIJVrykPDC7DUeE=
Subject key identifier: B1:41:C9:24:91:19:F2:07:55:44:FD:DF:36:BE:96:A8:E8:E0:E5:72
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFE967E2706E0F93C2FCC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b13adc0f-bd07-369e-8093-86bd80bbd1b5.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 12266
IP address blocks: 2001:470:68::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e9:67:e2:70:6e:0f:93:c2:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=3c729db5-a207-455b-8f75-910047414373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:b8:b3:b6:f2:bc:8f:ec:3c:59:e4:3d:e1:
06:b1:d1:6a:ee:0c:3b:24:70:38:ef:59:b6:ee:9c:
19:35:c9:76:10:62:a9:d2:fb:0e:32:e3:83:5a:0b:
67:16:24:d1:7f:d4:23:1c:af:17:f5:82:b9:05:09:
5c:c0:5f:a2:07:f4:20:9c:5d:b2:35:b7:a5:04:87:
a3:01:70:93:28:90:7d:12:5c:22:e3:d9:77:77:88:
47:9f:74:6c:be:0f:4d:22:f6:98:b5:2c:f6:ce:11:
1b:44:19:1f:69:6f:2b:cf:9a:c4:74:fe:ae:4b:6a:
e0:bd:0d:4d:ff:59:bc:36:e3:ad:47:68:5f:93:f9:
9d:b2:3f:1c:80:e7:5b:34:a2:8a:d4:a7:85:49:1a:
0f:87:71:00:22:b6:83:a3:cd:e2:b3:fe:ab:39:0a:
65:64:04:37:45:83:3c:7b:14:4e:2e:14:b3:7e:6c:
0f:67:1e:41:d0:8a:35:1c:42:f0:b1:71:9d:4d:cd:
39:f3:de:00:4e:dd:30:db:ad:8d:9e:15:07:3a:a7:
47:20:b9:40:46:0a:fa:e7:49:2c:c1:0c:98:1a:93:
0c:04:70:35:8c:8a:5b:03:20:18:d6:3a:5c:b8:9c:
54:7b:1b:07:cb:2d:3c:f3:50:b4:f3:83:07:18:b8:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:C9:24:91:19:F2:07:55:44:FD:DF:36:BE:96:A8:E8:E0:E5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b13adc0f-bd07-369e-8093-86bd80bbd1b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:68::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:f2:79:3e:b9:bf:02:fa:2c:4a:80:59:cb:eb:da:6b:d0:12:
06:31:58:46:76:9a:37:40:fb:aa:77:ab:4f:34:06:76:d2:c8:
d9:f6:48:9b:b9:eb:17:7f:c2:9a:c2:8d:45:26:df:da:7a:cd:
23:cc:5b:cd:b2:e6:98:fe:53:6b:07:8b:e6:ae:4a:98:7e:9e:
de:7c:0f:68:d5:6e:b4:97:ca:a0:7b:a3:02:3b:ca:08:63:e6:
72:38:19:88:e1:1a:d9:8a:f2:79:10:d9:0c:f2:09:f6:cf:8c:
ed:c2:7d:99:cd:5f:c2:fe:02:44:b0:e1:8f:97:12:7a:6d:85:
a7:a9:84:13:0a:6d:f5:d1:c6:cf:4d:e6:f7:ba:5d:d8:db:d9:
37:77:1d:f4:17:25:c8:23:6c:ae:98:eb:a8:ce:3a:44:b6:82:
2f:c1:74:2c:5b:85:f9:a4:bd:55:cc:e6:9f:85:33:1f:5b:5c:
b9:d9:3d:0e:4f:13:6b:1a:ea:88:af:06:58:61:90:c1:23:3e:
5a:99:1b:28:49:51:2b:1b:44:5d:63:cb:02:e9:ac:d5:2a:a7:
fb:7b:0f:8a:af:c9:7b:1a:94:8a:92:96:49:51:cd:34:e8:1d:
4f:93:29:ec:00:02:18:63:a1:05:cc:6a:36:4c:c8:a0:51:e4:
01:53:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:35 2025 by rpki-client