Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa
File: d904d990-fb1b-387d-aed0-223f5240308c.roa (raw, json)
Hash identifier: w9LecUoI4qs/G1NBpA3oKa7HfR0rcOQR+1cAxwDIshE=
Subject key identifier: 87:E3:21:F0:9B:D4:44:6F:F8:B1:1C:6F:30:25:E5:D7:82:48:71:E6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858486D9EE63D79FA135940FF2B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa
Signing time: Sat 04 Jan 2025 02:30:10 +0000
ROA not before: Sat 04 Jan 2025 02:30:10 +0000
ROA not after: Fri 04 Apr 2025 01:30:10 +0000
asID: 20205
IP address blocks: 2001:470:3ea::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:9e:e6:3d:79:fa:13:59:40:ff:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 4 02:30:10 2025 GMT
Not After : Apr 4 01:30:10 2025 GMT
Subject: CN=69bdc913-7e96-487c-8804-f6a3c64fc65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:26:10:ec:d0:f1:1a:2a:74:6c:24:4c:af:
59:00:39:38:4e:07:c5:41:97:3f:1a:f3:2f:84:aa:
26:fd:8e:60:a5:45:7a:6d:32:f8:e8:b6:66:25:61:
14:2b:71:76:77:72:d1:25:fb:2b:39:fd:e7:38:fe:
1e:f9:9a:91:b6:dd:fc:cc:7f:36:1f:72:c5:55:b1:
c3:f9:e0:84:e2:9a:f7:c8:21:26:31:96:af:77:cc:
4c:c9:65:84:24:d8:04:4d:82:d3:94:37:58:04:72:
0a:3d:93:1c:af:54:ef:03:ff:71:31:75:6d:fe:33:
a8:90:8c:6b:a9:ae:89:57:e3:14:28:7b:e2:b1:e2:
fd:4f:ad:f9:42:c4:0b:a1:fc:03:05:49:bd:19:c3:
1b:61:7e:a0:6c:9e:ae:26:cb:03:43:00:cb:35:9e:
bf:86:8c:c3:7b:e9:a2:13:65:50:b8:f5:9e:c9:89:
a9:e0:ab:8e:45:29:fd:4b:20:1a:d8:19:7e:2b:51:
e0:62:34:83:da:28:d7:22:c6:7e:f7:4a:c4:46:a9:
12:c1:96:ff:d2:dd:29:5e:7a:ac:d2:7a:d8:20:08:
9f:fb:d4:c8:0a:7a:bd:ce:ab:7b:23:90:63:be:bf:
43:14:ce:8a:84:f8:3b:a4:1a:be:17:45:3b:3b:95:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:21:F0:9B:D4:44:6F:F8:B1:1C:6F:30:25:E5:D7:82:48:71:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3ea::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:0d:f0:ba:97:92:9c:8b:72:23:df:d6:90:bf:c8:fe:5f:5c:
ba:b1:d9:05:33:c0:9a:f6:4a:31:dc:8b:1f:e4:7f:58:d7:86:
c8:3f:c0:4e:fe:f6:ff:7c:15:25:4a:dd:c7:18:88:03:36:eb:
c0:e8:62:96:83:13:95:11:2c:0f:5c:19:86:4d:87:d2:f3:86:
83:15:4f:f7:44:d3:21:3b:7a:92:62:0a:f1:33:50:27:4e:9b:
32:ee:71:e0:86:21:2d:d9:14:94:3e:dd:5f:57:02:60:16:f5:
9f:05:f3:d9:f5:2b:fa:13:2d:91:b6:1e:1c:0c:77:31:1a:b4:
6b:d9:b7:df:25:e5:6d:57:4e:bf:af:bb:70:ef:0b:60:30:00:
8d:e9:98:6f:92:0f:06:33:c1:c5:64:e9:da:dd:fe:bb:f9:87:
21:c6:44:5d:fa:92:7d:3b:40:65:db:0c:d7:b4:9e:ca:95:65:
84:e2:3d:f1:fe:9f:c7:dc:fd:11:bb:96:eb:89:60:eb:80:44:
c7:bd:8d:44:d7:7f:35:b1:02:c7:34:d5:35:90:58:f0:82:8b:
c9:52:0b:12:aa:85:1e:05:8b:17:2b:6e:e6:de:02:d0:59:35:
07:6e:57:f4:11:59:12:7a:44:b7:95:5c:64:10:e7:d5:3d:04:
f8:bc:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:34 2025 by rpki-client