Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c969ce82-f8ea-31af-b60f-ae509527d37d.roa
File: c969ce82-f8ea-31af-b60f-ae509527d37d.roa (raw, json)
Hash identifier: G2+2Y9GrlC4iDfPLzHqOHuIkzMtssrwUhMn3z5Phf7o=
Subject key identifier: 6F:6F:EF:69:F6:8D:AA:08:6D:E1:71:86:E6:95:BB:06:B9:24:26:CD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858488815ED52604B1AC7C8AD9F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c969ce82-f8ea-31af-b60f-ae509527d37d.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 216040
IP address blocks: 2001:470:353::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:ed:52:60:4b:1a:c7:c8:ad:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=04835c53-0cc2-4723-bdc0-69c3548659a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:43:ab:6f:9b:fa:2f:bf:00:9c:23:72:61:
37:9b:40:07:03:7f:45:22:44:55:71:06:c0:bb:43:
93:27:23:8b:b0:34:d4:74:61:bb:45:b7:0e:c2:e0:
c6:42:40:51:f2:88:d2:20:b2:d2:f1:36:57:ba:e4:
73:3d:8a:45:56:f9:55:98:a0:d2:ba:df:bc:3a:3d:
8b:a3:c6:0f:19:10:76:ce:c6:5e:b0:5e:ef:cb:8f:
c7:1b:1e:8f:de:17:b2:c3:68:21:18:1f:26:60:51:
ad:4a:f7:cd:dc:91:23:52:ba:77:56:8d:10:70:ae:
92:0d:bb:82:2f:03:4d:46:03:61:70:b8:f1:f9:26:
66:a0:e5:40:22:61:81:ef:6e:3a:38:61:ed:04:16:
e4:b7:76:f1:d8:99:8d:e6:e1:e9:ed:d4:54:63:d5:
50:1c:c0:53:01:57:b5:ce:32:58:3d:32:3c:a0:a5:
da:9d:1b:43:94:53:6c:e5:11:a6:e1:58:83:38:78:
2d:c7:39:00:97:46:76:4b:f7:8b:b7:bd:a2:d9:86:
f1:7f:3a:24:b9:11:b8:e5:a0:28:e4:f2:64:dd:ae:
4c:d7:57:a8:96:fc:5b:eb:f9:9f:1d:75:09:fa:2d:
78:91:cc:33:e9:d5:7c:19:6b:61:a5:fd:8d:cd:21:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:EF:69:F6:8D:AA:08:6D:E1:71:86:E6:95:BB:06:B9:24:26:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c969ce82-f8ea-31af-b60f-ae509527d37d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:353::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:85:f3:ff:9d:2d:68:d8:39:4b:8d:d8:b9:3c:c0:46:0e:4c:
67:17:01:75:52:4a:86:70:6a:47:a3:09:68:d9:fd:50:38:d5:
21:0f:b9:5c:cf:7a:c0:19:bf:07:eb:20:08:92:dd:32:72:a9:
d2:c9:7f:dc:6e:95:be:9d:78:ea:da:17:f8:a8:31:5b:8a:76:
02:0b:96:8b:8e:d0:d2:37:b5:69:38:98:d6:d0:52:a5:37:6f:
cb:c3:0a:41:62:4d:63:e3:7f:51:ea:36:92:3c:31:79:02:e3:
1d:95:89:fa:9b:67:1b:1c:e3:91:13:af:00:fd:d8:b7:bd:96:
de:44:7b:c0:d0:8b:6d:88:e2:dc:50:68:ff:1c:33:a1:1d:bd:
f3:29:94:14:6a:6f:28:21:a6:61:69:a3:72:fd:07:e7:89:ad:
40:6f:89:ae:e9:69:b8:b6:12:ec:35:ee:c0:e7:78:6a:80:f6:
23:72:f8:ca:81:26:8d:db:9b:fb:4d:31:b4:db:fa:ca:b5:72:
74:8d:e1:32:be:de:86:d8:3c:08:cd:3f:a0:92:48:08:aa:e3:
47:3a:21:73:30:59:51:35:76:33:b3:86:a0:b1:d2:54:8d:44:
3e:26:e8:d6:d9:08:fb:8b:2d:e5:a2:c2:2d:03:ee:b4:8f:6f:
5c:17:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:44:58 2025 by rpki-client