Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c60a00b5-35cc-302e-8df6-6ca0f36c30e4.roa
File: c60a00b5-35cc-302e-8df6-6ca0f36c30e4.roa (raw, json)
Hash identifier: hKYcVF2tKP9f5K5psNZNzS1vuFp6HtU27fKGxaJw/Tk=
Subject key identifier: 58:96:C9:E6:CB:A0:79:D9:28:1D:78:40:45:32:5F:E7:03:8D:64:AC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFF07D5862661CFD5FF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c60a00b5-35cc-302e-8df6-6ca0f36c30e4.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 30092
IP address blocks: 2001:470:271::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ff:07:d5:86:26:61:cf:d5:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=20d5e148-87fe-422b-a3c1-858578d77305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:3a:ef:e8:6e:45:2a:2f:6c:f6:90:8e:16:
86:93:2e:68:46:4f:19:2d:df:8c:31:71:24:c4:3a:
c7:28:61:28:62:47:20:f4:c9:08:1c:3e:06:e6:59:
f4:a7:11:83:d5:24:d9:8b:29:7b:23:18:6c:c5:39:
9a:9a:dc:ba:a6:2b:d7:31:44:b7:23:91:ba:e9:ad:
1c:e2:e3:84:80:bf:d1:ef:a9:b6:27:68:ca:c0:91:
7d:56:d5:32:f6:9f:ee:ac:71:9d:6d:02:d7:64:4c:
c6:66:d5:23:ef:2a:9e:a1:41:48:db:a8:63:82:14:
bc:4f:b8:77:32:4c:cd:05:78:86:bc:f4:1f:7f:1b:
9c:5e:a1:db:30:09:f1:35:90:92:a3:50:2a:ca:bd:
03:3d:16:69:51:12:f1:d9:a0:e3:11:7b:e3:f4:60:
3d:34:af:40:93:2e:a7:3e:9b:78:6d:49:c8:bb:e4:
5a:c3:9a:03:a1:58:90:87:e1:86:06:c1:49:df:a1:
d3:2e:cf:85:24:a1:9d:46:c2:0d:37:b4:ee:a4:2e:
45:85:99:33:35:9d:b5:11:b5:64:e7:46:31:dd:4d:
ed:0f:9c:dc:12:a7:fd:0a:3d:1f:d9:e3:38:81:18:
80:8d:19:80:ca:07:1d:60:bf:3e:9c:94:49:80:e0:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:C9:E6:CB:A0:79:D9:28:1D:78:40:45:32:5F:E7:03:8D:64:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c60a00b5-35cc-302e-8df6-6ca0f36c30e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:271::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:ce:0b:ed:0e:86:f5:fc:d1:1f:47:70:53:f2:ac:e5:02:da:
90:07:87:c0:a3:76:17:c4:cd:e1:c9:ef:ff:af:4c:45:4b:df:
f7:f2:f7:11:ce:48:e5:01:da:80:ca:7f:81:f6:4b:28:d1:f5:
9a:b1:f0:a6:80:e3:9b:9b:d8:98:a8:72:5c:03:ce:1c:03:34:
2e:62:8c:64:3d:5b:b9:55:33:04:27:b8:cc:e4:b9:84:b3:3a:
b3:50:b3:55:24:34:b0:42:ba:16:4e:09:d0:c5:2f:21:04:ad:
04:7d:b9:3f:e1:28:0e:aa:a9:a2:2d:37:79:00:1c:86:bb:0b:
d8:06:12:0e:20:3a:5b:a4:25:7e:03:8e:4d:25:b6:5a:8d:2d:
1b:4f:af:ad:fc:a5:f8:37:13:7c:d9:f5:79:8b:96:09:b3:8f:
bb:1e:12:94:44:4d:67:ec:ae:a8:22:86:ce:cc:65:c1:af:f5:
0e:8d:cb:d5:7d:db:6f:6e:b4:e0:f8:55:42:9c:af:27:79:bc:
19:fd:69:d7:dc:9b:f7:a8:85:50:55:de:d4:fe:0b:43:29:46:
9e:12:b3:4a:b8:ec:60:e7:e3:77:22:39:e7:27:99:b2:49:80:
23:bd:b8:95:0c:93:76:87:c3:64:ff:02:68:f0:67:88:15:5b:
88:13:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:00:35 2025 by rpki-client