Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa
File: bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa (raw, json)
Hash identifier: 4K+A2ePnX02ColK4nQasT6FJAQO3AyxpHgx7QDXPEIA=
Subject key identifier: 7C:09:14:1B:F6:A6:12:0F:85:68:27:BF:54:1F:A6:46:8A:E5:77:38
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEA7892EDEE3498DCEF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 18779
IP address blocks: 2001:470:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ea:78:92:ed:ee:34:98:dc:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=241f8d2c-6fd7-42f4-a8a5-565286acd87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:00:8c:ae:d6:7a:5c:0d:0f:bb:9e:6e:4e:
9d:71:ce:6b:13:e0:7e:e8:02:ac:05:ab:9e:33:96:
35:40:2d:a6:9d:df:f1:25:80:f9:50:ca:6c:52:3b:
eb:7b:7b:87:16:9f:57:e8:42:41:b1:e6:4f:7f:ad:
69:48:34:a6:63:9e:2a:e2:78:60:1e:0f:42:31:ae:
9a:5b:8e:21:f7:45:7e:ba:66:ea:c4:c3:a4:b8:87:
c4:c0:2c:c7:c7:74:ae:84:46:db:6a:91:55:1b:02:
25:e7:75:37:3d:f4:b3:c9:a8:f0:a6:40:ed:7f:d6:
e7:f9:46:36:3a:2b:da:87:40:21:7a:69:49:58:8c:
1d:9f:4c:64:a8:fd:d2:26:d4:7e:41:e5:52:ef:08:
ae:f3:9d:be:77:dc:b6:53:46:1c:83:d4:fa:3c:b6:
49:eb:e4:36:29:6a:73:12:77:fd:68:1d:97:b1:a1:
4e:ab:39:49:fa:fd:16:69:fd:44:d4:18:c2:b7:c7:
f6:a0:c1:cf:93:28:8a:fd:97:cf:bd:7e:f1:87:0c:
a1:72:d3:fe:56:c3:b3:6f:13:21:fc:22:fe:28:30:
82:55:97:d8:96:50:ad:c7:29:f9:a7:fb:49:3b:7a:
bd:33:c7:3c:70:f2:c3:9c:bf:51:03:31:93:98:96:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:09:14:1B:F6:A6:12:0F:85:68:27:BF:54:1F:A6:46:8A:E5:77:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a6:77:05:84:2a:c8:1a:6f:08:66:c7:5e:fc:99:e3:ff:88:
9c:42:ee:79:e3:2d:a5:70:87:1f:ef:34:6c:10:19:dc:24:c7:
e6:6e:38:8b:92:54:70:c3:50:c7:0c:bf:a9:9c:5a:ec:72:c3:
0f:16:51:dd:2a:25:34:cf:b7:b2:a2:d4:ff:6b:d8:4a:04:9a:
12:b0:ad:90:a4:58:0f:60:0f:d2:a0:e3:c3:e8:11:67:cb:43:
8a:79:cc:e0:cc:89:9e:30:ff:b4:10:ae:c5:1f:18:0d:1d:3c:
5e:4a:96:6d:89:1d:5a:b7:0a:79:d6:71:26:86:ab:16:64:a4:
43:4a:d8:47:07:d7:3b:56:67:21:92:3e:14:3d:c8:71:1f:56:
d9:0b:78:fb:de:ac:7c:0c:d4:02:17:27:0f:2f:6a:c4:c8:79:
d8:df:a1:25:4b:f2:cf:d8:e0:ac:14:59:fa:e7:63:27:f5:26:
1c:2a:b7:65:f2:35:aa:64:ed:3d:44:ba:f0:1c:46:68:79:70:
49:58:81:56:9e:23:6b:09:84:06:93:ab:7f:48:66:77:15:0a:
b9:93:71:44:97:57:bc:8c:74:27:a3:b9:75:6e:98:e4:77:36:
98:19:9c:67:a1:0a:fd:9d:20:e7:59:f7:75:9e:b2:18:73:39:
85:6d:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:22 2025 by rpki-client