Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa
File: cb9c6794-43ac-335b-8cf5-234be57cf61a.roa (raw, json)
Hash identifier: gQ7Ud90FkPKTcyjnnZ/goIRsX3Mie7MNmb4BuupEQ+A=
Subject key identifier: AD:A9:2E:27:A9:52:DE:95:3E:32:F7:FD:E2:DA:64:CA:B1:C1:11:97
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D000C5F5EF5E5CC3A57740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 13188
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:00:c5:f5:ef:5e:5c:c3:a5:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=8f4c3fbc-816f-4ebd-b679-e60faa4060b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:3f:f7:55:6a:4c:46:9c:cc:25:57:00:3d:
33:12:86:69:9e:84:56:3f:7f:1e:97:11:a6:4e:2d:
17:10:fc:89:af:88:87:5e:a1:22:0a:2c:7f:6b:b3:
45:dc:3b:ee:15:dd:57:5d:dd:79:33:33:66:9a:c3:
e1:b5:0d:a3:6d:c8:55:3e:97:18:f0:da:72:5c:01:
32:8e:33:32:36:3a:26:83:9d:b1:43:98:2c:d4:f6:
ba:11:5f:46:ab:d3:43:2b:d0:9b:47:6c:59:4b:c8:
d7:f5:76:fb:8f:46:27:9b:85:27:ee:4a:9f:ab:82:
10:d7:87:fd:44:b9:62:f0:0d:44:7d:0c:b3:1c:67:
2b:a3:d9:7c:9d:5e:29:37:60:b2:b6:97:03:69:fe:
0c:8a:3e:27:e9:0f:e0:89:1f:75:37:04:07:0e:c4:
a5:35:12:58:34:e6:b1:cb:63:cd:bb:c3:e4:32:82:
d3:43:76:b7:94:29:18:f7:da:f4:f0:fa:f0:52:31:
32:6e:a9:da:65:db:aa:f5:12:a1:47:64:94:08:02:
ef:b7:43:07:ad:b2:25:d6:11:f6:68:dd:e4:37:88:
fe:f7:52:3d:0b:9b:e3:2d:3e:d8:d8:5a:14:7e:0b:
18:19:72:fa:a8:77:1e:a8:34:c4:e1:29:3c:49:10:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A9:2E:27:A9:52:DE:95:3E:32:F7:FD:E2:DA:64:CA:B1:C1:11:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:74:db:c7:c0:cd:f8:5d:41:e2:e0:1f:e0:02:64:b8:7f:a4:
1e:79:58:6f:cd:02:d6:d8:b3:57:af:f0:12:89:b4:e0:e6:35:
92:58:ac:98:a7:73:a3:8f:7f:56:aa:b0:c0:81:bd:8d:77:8e:
04:b9:a0:e9:2d:4a:de:c6:f9:99:64:74:82:f6:b1:2c:36:9a:
8e:9e:d1:69:81:d4:46:c4:1a:bd:92:6b:2a:c2:2f:d9:e0:5d:
95:0d:8f:42:fa:78:d0:27:ee:fb:f0:9b:48:34:06:67:49:f5:
1d:df:0d:49:12:fd:6c:7c:40:50:5f:ac:6e:40:f6:4f:7c:a5:
87:fa:19:7b:41:22:ad:cd:bd:d9:24:a8:fc:05:c5:0b:b0:7d:
10:b2:6a:87:7d:c0:fd:de:2a:0c:37:6a:49:24:89:9b:3c:e6:
fe:8c:5d:5e:44:7b:d0:f1:97:4a:c9:48:bd:b2:18:9d:43:90:
08:32:64:13:5a:73:ed:49:80:e3:aa:50:37:2f:4b:19:f4:60:
40:2f:48:b5:f1:9b:17:6f:0c:0e:00:a5:68:d3:ab:25:b9:86:
1e:e4:9b:66:1c:ed:7c:59:ec:a0:a0:54:3f:c3:07:ab:13:52:
b6:22:29:54:68:27:71:04:d7:9c:d0:ed:1c:81:b8:c9:11:4c:
e2:c7:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:19 2025 by rpki-client