Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d94846-24f1-3b7e-9fcf-d4ce36448b9d.roa
File: b7d94846-24f1-3b7e-9fcf-d4ce36448b9d.roa (raw, json)
Hash identifier: g4x3azjlP1FekyJmm2H9UMbgSerSxGUGmCAAnTAyAVA=
Subject key identifier: 86:18:5A:09:E8:20:FA:13:9C:E5:86:DE:91:00:6A:7D:74:3C:D3:DD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584858A041F12CB9199E32EF3F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d94846-24f1-3b7e-9fcf-d4ce36448b9d.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 207821
IP address blocks: 2001:470:3a5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:41:f1:2c:b9:19:9e:32:ef:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=b41c8fb0-6c79-4598-9c05-c989211eff6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:dd:13:cb:9a:83:3e:36:8c:c5:c6:d8:0c:
5c:1f:4f:e7:bc:cd:06:86:5d:2f:7d:f5:c3:64:c5:
3e:f3:bd:07:41:d1:2e:09:f3:59:09:1a:51:35:50:
ff:fc:f0:2b:c9:3d:86:b5:8b:54:89:87:89:c7:b6:
8b:dd:a3:dc:00:e3:47:a1:4a:43:d7:d4:eb:96:e7:
69:a1:36:01:10:33:57:d7:db:0b:9a:b0:8e:ff:4a:
09:9d:8a:29:85:6a:8e:55:54:20:e0:22:d2:23:40:
6d:7c:46:54:c7:ca:54:3a:77:16:a2:03:12:cf:f5:
7d:dd:4f:65:26:3a:c7:2c:dc:a2:10:66:e8:19:db:
8a:20:bf:77:dd:2d:d2:5f:fb:20:9f:1e:c8:1f:43:
ab:4c:53:59:cf:69:c1:e4:b2:c1:fb:aa:c5:c5:a9:
58:90:2c:5e:33:66:fe:21:8c:39:a2:d3:11:38:bb:
62:8e:2f:03:63:98:18:a0:e6:e5:59:d2:56:5f:44:
88:c8:79:3e:e9:75:41:bf:a5:6f:6b:0c:ee:b7:e5:
b8:78:f0:41:fa:73:c5:15:ba:97:3e:46:41:f1:17:
2d:ca:8b:99:46:d8:f5:f5:37:f6:f7:c4:ac:82:0f:
9f:b2:0c:1c:71:83:ef:45:15:6f:2d:03:f1:9f:dc:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:5A:09:E8:20:FA:13:9C:E5:86:DE:91:00:6A:7D:74:3C:D3:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d94846-24f1-3b7e-9fcf-d4ce36448b9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:3d:30:64:08:29:62:09:8e:b4:f2:cb:1d:2c:f8:26:84:2f:
90:0b:7a:78:72:bd:d6:24:1d:a7:28:74:57:ae:80:eb:c2:2f:
4a:7d:c6:fc:3f:55:1d:41:af:73:9d:10:71:dc:03:45:d3:0c:
f7:2e:b5:84:d9:a6:ff:43:5c:1e:a9:1d:37:8a:a0:2d:59:db:
a1:13:56:38:ce:82:12:da:24:06:04:c6:78:82:71:bd:f5:b2:
27:42:0a:d2:a8:c8:fe:b3:fe:78:f1:22:37:72:6c:83:fe:1a:
ed:7e:c6:9d:63:65:d9:6b:f3:67:cf:b0:88:de:4d:a9:61:62:
96:e4:1f:95:b5:32:98:9b:a5:5e:fc:7a:58:40:3f:fb:64:c3:
44:13:a2:f5:03:99:82:3b:f0:cd:3c:a2:cf:b0:53:ce:94:31:
a2:37:fd:08:4b:60:2b:17:54:26:4b:eb:28:0d:7d:04:d5:48:
e3:ee:4c:3f:a6:db:60:0f:05:e7:05:b1:6d:f2:1e:0c:47:96:
8d:fc:17:38:14:2a:5c:bf:da:ce:7a:7b:ca:f9:6a:fe:5c:c2:
cf:d1:8f:18:01:c5:e4:ab:72:18:09:ba:3f:13:92:93:74:a2:
ae:9e:46:52:fa:96:63:f7:e2:32:fa:d5:f0:46:14:a9:78:a5:
82:29:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:12 2025 by rpki-client