Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8d9de85-6484-3fd1-844f-4105472bcdc7.roa
File: b8d9de85-6484-3fd1-844f-4105472bcdc7.roa (raw, json)
Hash identifier: 23yeJ7zW6yZ/gWPY6QJof6SGOpdZPT5sytcN65YWFIc=
Subject key identifier: 02:DB:75:15:27:22:3D:11:E7:C2:98:CB:9A:F2:F4:82:E3:85:E6:8B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00EDC8DD2B6B2C243DFD0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8d9de85-6484-3fd1-844f-4105472bcdc7.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 7175
IP address blocks: 2001:470:11c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:0e:dc:8d:d2:b6:b2:c2:43:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=767afe9d-dd2d-4478-8048-1a2b0a5431f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:aa:3c:0f:e8:7f:30:52:3c:2d:72:36:19:
65:32:b7:f0:5b:1a:72:c7:38:7f:e3:c8:65:bb:86:
cd:51:2c:6d:4c:52:d4:ca:89:44:5b:40:c5:7b:9d:
24:2b:0d:14:49:5e:e4:75:b7:76:44:5d:1e:7a:79:
fe:24:40:e6:f0:ce:e8:dd:50:41:15:a2:74:ed:7e:
47:33:38:67:85:42:72:fb:59:f8:4b:7c:a6:71:2b:
e3:62:1a:75:d2:8c:5f:08:98:7f:50:9f:e6:b5:ba:
8b:08:df:35:99:ee:bb:f8:13:09:88:c8:29:c9:1c:
9c:35:7a:b1:9f:b3:0a:a8:ca:ba:9a:ba:9d:98:a6:
a5:10:38:73:19:05:47:4f:f4:7f:8a:aa:8b:fd:71:
c4:b9:93:d9:c6:52:2a:ad:f3:c2:a5:c5:e0:31:6c:
c3:ee:5a:11:71:a6:82:11:2f:5a:e4:fd:39:d6:3b:
76:6d:3b:7a:09:bf:71:ae:b3:54:6a:ee:db:b5:8a:
80:7f:4e:ec:12:cf:31:97:93:81:94:b9:5f:63:af:
50:46:0d:34:30:c2:c2:8f:37:9c:72:38:7f:48:6e:
47:f9:0c:35:b8:52:12:4f:1a:e6:80:70:77:d0:4b:
c1:df:9e:9e:16:73:86:67:a3:a5:e7:09:45:8c:80:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:75:15:27:22:3D:11:E7:C2:98:CB:9A:F2:F4:82:E3:85:E6:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8d9de85-6484-3fd1-844f-4105472bcdc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:11c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:3b:6a:2a:a5:32:33:06:aa:5e:26:cf:36:79:b9:8b:3e:d4:
51:8b:4b:c1:4c:25:17:a5:fb:c9:eb:22:ff:dc:95:28:82:3e:
e5:19:85:5d:9e:a4:32:7b:fa:1b:90:ea:b6:0f:27:86:4e:15:
98:2e:54:93:dc:a4:45:2a:02:fd:ca:04:8a:f0:80:0c:55:b6:
24:6f:03:5d:94:f2:ff:93:25:6b:07:d1:ca:73:72:e7:68:25:
8e:29:86:3e:91:b8:6b:dc:6d:34:41:40:86:84:84:73:ba:fd:
9b:5d:3b:c5:a7:f6:91:35:e7:a6:1d:8f:3b:ea:85:7b:f9:63:
88:31:75:98:15:5c:6d:f4:1e:eb:b3:85:74:3a:50:9f:de:2e:
65:e8:2d:c0:a4:79:2a:13:a0:d6:47:da:44:15:f4:fd:3d:09:
09:06:e6:be:a9:c5:85:06:61:3c:4c:f9:0a:38:42:3e:a6:44:
df:22:5b:8a:59:6f:0a:9b:4c:39:24:17:da:40:89:56:3a:65:
c5:97:1a:c2:70:f9:45:a6:84:83:4e:f6:f5:ae:12:ea:32:29:
38:47:eb:48:16:26:97:89:f4:46:ba:8a:1d:9f:c5:e0:dc:02:
43:27:66:26:c4:cb:88:06:6b:94:a9:f8:7d:19:79:ce:55:bf:
a6:f9:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:31:51 2025 by rpki-client