Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa
File: d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa (raw, json)
Hash identifier: Fq4JIdaN9syRCF/nJcAPGPOtbT1vt15RP2se/NCAmTA=
Subject key identifier: 74:50:A5:D5:1B:F9:53:E9:4B:A0:9D:6C:16:37:6D:23:3D:F4:76:02
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D005B0BBE979C8FDCCFB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 212341
IP address blocks: 2001:470:a7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:05:b0:bb:e9:79:c8:fd:cc:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=d086d4b0-b99c-4fd5-ac00-b3b8764468f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:e6:7d:ea:cf:bd:de:51:cd:38:88:ca:b7:
4e:77:a1:88:b5:19:90:6e:af:2c:a1:80:f9:8f:c7:
20:14:8c:43:9f:59:e2:58:67:a0:28:ec:a2:c1:1c:
cc:b7:2b:b7:b6:7c:04:4f:5d:f6:61:98:0e:fb:e8:
0a:48:c8:0d:44:bb:ff:20:47:11:a7:ae:ea:36:bc:
af:03:06:bc:88:3d:c1:d5:aa:39:ef:75:3f:2b:a9:
13:eb:ff:a9:65:21:db:a2:7c:a9:44:65:88:19:74:
57:a7:7a:59:cc:03:fe:f0:e4:07:63:e3:9c:f8:36:
7a:fb:27:c6:f2:ae:41:98:ad:65:46:66:19:05:15:
5f:4e:5a:03:bf:75:7a:5e:ad:e3:c6:58:3c:65:cd:
08:4e:84:77:f4:72:75:5c:90:96:c7:f3:35:50:fe:
e8:73:9e:51:10:ab:30:69:cd:81:29:db:85:61:e9:
8c:fa:fc:e3:be:5c:64:c3:bb:bd:1a:b8:d7:2f:a2:
10:36:bd:67:64:c3:cb:5a:e5:a7:bf:e2:98:d6:be:
fd:47:5d:a2:94:e5:6b:c0:f6:87:7f:34:81:6d:98:
6b:c1:7b:0b:eb:08:a1:e6:89:3f:a0:9c:54:95:ee:
78:cf:33:21:93:98:53:b3:a4:74:6f:d7:77:f0:5e:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:50:A5:D5:1B:F9:53:E9:4B:A0:9D:6C:16:37:6D:23:3D:F4:76:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:a7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:6d:e4:a4:3f:a4:d4:ba:af:e7:9b:ae:f6:cc:43:35:13:7f:
0a:4c:b9:3c:7f:9d:db:af:65:27:43:a9:98:ea:43:fa:66:be:
ad:1b:32:d3:f8:fc:12:dd:d1:9a:6d:09:4a:b4:8b:84:d8:8c:
16:32:17:37:91:13:be:6a:ed:19:2c:d0:5e:a4:79:7f:ac:56:
28:33:44:83:44:8f:bf:b2:37:77:63:7c:7f:f0:da:b7:ed:ad:
da:9c:b9:d0:bd:0a:71:56:02:7a:f4:a6:4c:77:11:06:9e:45:
5b:89:9d:e0:32:0f:2d:ca:25:5d:08:e0:4a:11:27:ff:ae:67:
2f:b6:5a:a9:ab:50:61:1c:1a:3d:83:b3:cf:86:57:9e:c9:87:
ca:dc:88:2c:0a:94:52:50:1a:00:1c:41:c0:bb:fd:6b:6e:72:
c0:53:63:1e:5d:df:0e:1a:7c:0b:02:d9:ea:b2:bb:b4:25:b0:
cf:6e:da:da:ad:c8:5e:fd:d8:b8:02:18:d1:91:ea:04:fb:63:
4e:44:a1:77:14:bd:c1:bd:66:2a:a9:0a:ff:e0:51:2a:d1:3e:
e4:ff:da:b2:7f:97:4e:fe:fc:6a:1f:91:03:66:6c:c5:c1:a2:
ef:2b:d6:23:8a:fd:3e:4e:56:ad:d4:2c:0a:02:7c:6a:01:20:
13:92:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:00:18 2025 by rpki-client