Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4f65c00-6562-3e82-baa3-25f576740985.roa
File: d4f65c00-6562-3e82-baa3-25f576740985.roa (raw, json)
Hash identifier: LeOGv5WUf7Yt1odF6a8V1IZylmjalLEmihXAjBzJOQw=
Subject key identifier: 7C:6E:86:7E:AD:7E:8D:0B:7B:2F:84:CB:82:59:D0:9C:D2:02:C6:7F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858484AAAD0174CE33BBE426A7500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4f65c00-6562-3e82-baa3-25f576740985.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 204536
IP address blocks: 2001:470:39b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d0:17:4c:e3:3b:be:42:6a:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=538af4cb-60f6-4773-8a46-ac6fb715615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:31:f2:a0:62:79:06:a2:0b:85:70:6c:da:
32:ee:bb:78:f3:92:10:8a:39:06:dc:47:ce:18:08:
33:1e:97:37:0c:d4:97:1c:50:0b:08:fa:1a:af:72:
2a:25:ba:3c:31:af:cc:c1:22:89:f5:10:85:82:cc:
73:7b:9f:cb:6a:0a:e3:9b:9a:57:8c:58:52:71:ad:
d4:82:18:85:12:8d:cd:2b:6d:f7:eb:a6:40:30:70:
51:fd:40:20:79:18:53:71:c0:bc:a9:2c:0e:57:64:
c3:3e:93:06:a4:de:74:63:5e:34:0b:e7:a5:f3:30:
19:a6:b6:7c:3c:3b:d5:23:49:a3:64:cc:88:19:ec:
bd:03:19:aa:2e:d4:41:83:d3:d7:47:0d:46:a2:a9:
be:13:6a:4b:a5:ac:0a:b5:12:80:3d:53:18:3a:77:
b6:33:55:de:1c:2e:b5:8c:0c:5f:6f:e2:03:c2:ff:
dd:51:5d:3c:4d:91:8e:4f:e4:df:75:e4:ea:6c:f2:
ad:ec:87:ac:db:7a:df:b1:31:0b:db:21:8d:bf:fa:
ea:e8:92:ae:65:19:21:3f:8c:5d:35:c0:d0:25:bb:
33:7d:dd:10:7d:e2:bb:75:a7:5c:db:eb:86:d3:24:
5f:04:f3:41:61:ca:0f:c5:cd:09:79:8e:8e:4a:88:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6E:86:7E:AD:7E:8D:0B:7B:2F:84:CB:82:59:D0:9C:D2:02:C6:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4f65c00-6562-3e82-baa3-25f576740985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:39b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:74:50:36:24:f2:ed:cd:ab:79:61:82:91:40:68:70:76:18:
3e:8c:b2:c3:6b:70:de:4a:0d:54:3c:6c:31:62:9c:50:90:04:
48:07:54:38:c7:ba:27:d3:40:0a:22:18:b9:e4:71:35:30:aa:
3b:84:93:8e:76:4c:1d:0a:9d:93:44:74:ac:f7:d0:9b:68:28:
b4:6c:ed:57:97:37:45:e0:89:b4:13:57:b5:92:86:58:66:93:
97:58:b6:5d:c0:93:c3:57:45:4c:61:0c:2a:7a:06:fc:cd:7e:
31:ff:e3:5e:b9:a1:e8:64:45:4a:d8:1c:28:95:a5:f6:0b:d2:
f4:89:fb:a0:71:c2:d7:6b:c3:23:a1:08:02:9e:44:d0:0e:bd:
f3:e2:b1:98:b0:37:48:60:7e:f3:68:f6:4f:47:ce:65:ad:fc:
ad:6d:1c:bf:33:be:d3:9f:0f:78:25:b0:e9:1f:92:01:fa:dc:
58:d1:50:6d:e0:49:38:e4:b0:96:ae:73:37:78:e2:30:62:30:
ec:04:80:e1:3d:ac:71:9f:5a:d6:34:54:de:6f:17:f5:9e:66:
db:9a:4c:c2:22:41:3d:9c:55:2a:c5:0b:b9:8a:9e:a2:17:82:
55:7c:b2:cc:d0:b9:30:1d:86:c5:e0:55:3c:52:bf:15:e7:ef:
37:63:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:30 2025 by rpki-client