Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa
File: d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa (raw, json)
Hash identifier: 5Al1KNUCM9Og7XyxQzJ7fOnzQOz0DBYScfmXVXMDr6U=
Subject key identifier: 73:A5:52:A4:26:5E:56:A9:EC:B0:9B:0F:55:F1:B8:4A:EC:B2:75:D9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584870699AA716C12334EAFA9E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa
Signing time: Sun 05 Jan 2025 02:30:12 +0000
ROA not before: Sun 05 Jan 2025 02:30:12 +0000
ROA not after: Sat 05 Apr 2025 01:30:12 +0000
asID: 400992
IP address blocks: 2001:470:3eb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:69:9a:a7:16:c1:23:34:ea:fa:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 5 02:30:12 2025 GMT
Not After : Apr 5 01:30:12 2025 GMT
Subject: CN=245f6c3c-5204-4356-81fd-bc2d09066b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:74:15:6a:cd:d8:ce:15:75:3f:5c:6d:2f:
5a:09:a6:47:c8:d1:89:2d:32:30:29:f6:50:13:aa:
79:80:10:a0:27:1d:95:80:d2:1f:3e:33:97:83:24:
80:1b:1a:09:2b:17:36:1e:4e:af:e6:b9:ff:46:cc:
5c:42:f9:6a:23:ce:c4:39:04:bf:30:2b:b1:5d:e6:
59:b9:7c:a6:d3:86:47:a3:3d:4e:ec:67:f1:87:5f:
08:48:9b:98:5f:2e:c9:c4:09:83:3f:1d:2d:21:32:
c2:3f:bd:89:ed:f2:e7:a0:65:a3:2f:b7:02:23:ff:
9b:cc:03:02:31:f9:be:7d:21:e6:87:f6:1d:62:0c:
f8:2f:89:b0:7f:30:4d:0c:53:c0:fe:b6:77:05:d6:
82:2e:48:10:dc:eb:9b:7c:39:c5:7e:e2:23:23:5d:
49:62:03:ae:69:c0:03:01:f0:47:6f:5b:06:d4:7e:
22:59:2c:e1:05:2c:ca:d2:05:4c:4d:37:74:13:7a:
c2:9d:de:ee:a3:c1:e1:89:08:96:b5:c2:be:9a:ef:
45:54:68:14:bb:dc:bd:e8:01:f3:2d:6b:a2:3c:b0:
37:ff:dd:5c:8d:0f:37:b2:62:52:1b:a8:53:a2:e8:
bf:6a:41:da:f2:f9:dc:ba:41:09:de:b3:7b:8e:95:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:52:A4:26:5E:56:A9:EC:B0:9B:0F:55:F1:B8:4A:EC:B2:75:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:9c:1b:5f:80:cc:b3:0d:de:1e:3c:c1:ad:53:30:5b:47:51:
ea:12:44:41:a6:26:23:3e:ed:80:e6:48:fd:6e:b5:9a:1e:86:
d2:e5:5d:16:9b:15:92:64:3a:75:a6:21:0d:70:96:9c:45:5f:
e5:46:ff:ad:de:57:dd:7d:03:67:69:dc:c7:46:6e:7c:6a:23:
fe:5b:9c:f9:5b:cf:1d:7d:21:c3:b1:16:2b:bb:f1:ed:df:0d:
da:a7:a5:bc:c9:43:54:52:68:97:3f:f6:72:8b:f0:fa:ce:78:
6f:fe:9b:75:20:f4:47:36:cb:b2:59:38:8d:fd:3e:a2:0c:4f:
31:91:07:0e:46:2e:6f:01:be:ce:cd:80:39:a1:b8:5b:40:f6:
34:27:b7:a0:9d:fe:c1:c6:cc:bf:0c:58:d9:91:d7:c4:bb:34:
99:3b:4f:6f:f9:27:c0:f5:24:2c:0d:6d:fb:64:a3:82:1f:b2:
ab:72:63:4f:e3:f0:48:a6:0d:a2:6f:0f:bd:2c:63:42:70:31:
6d:9d:5b:23:ba:73:67:78:6e:0d:91:54:4f:6d:52:27:c9:8f:
34:e7:ef:9b:7e:05:b9:bd:c4:4b:56:98:52:f8:d9:8f:bd:2d:
e1:a3:ad:ce:4b:42:38:da:1b:47:21:69:b4:42:4d:7c:8b:50:
58:ee:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:15 2025 by rpki-client