Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3a8ad0c-80b9-3fc5-a24f-2962f73d967e.roa
File: e3a8ad0c-80b9-3fc5-a24f-2962f73d967e.roa (raw, json)
Hash identifier: MvB4Xa99uV1SGCqVK5koN9i1mfeTN2D+Lwy5T6tVWn0=
Subject key identifier: 90:BF:35:02:18:CD:21:D3:D6:D4:67:0A:E6:93:26:D4:C8:88:85:C6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D02155D8552D7BB321F460
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3a8ad0c-80b9-3fc5-a24f-2962f73d967e.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36902
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:21:55:d8:55:2d:7b:b3:21:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a7e7e772-fee5-4876-97b1-c08246072d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:63:6c:bd:c6:0d:21:e6:0e:61:44:84:2a:
e1:a2:dd:39:0d:f8:78:d4:b8:08:02:c6:25:d7:c2:
26:c7:c7:87:c7:df:83:bc:8d:ec:93:96:83:6f:d9:
c1:bc:63:38:32:89:98:37:e2:b1:7f:3a:71:39:28:
41:81:87:50:7a:d0:9e:25:e3:dd:69:01:7d:6e:0c:
81:26:dd:8e:70:14:46:d8:37:69:c8:a8:41:f5:28:
d3:bc:3a:8e:2f:d4:7d:7c:61:fc:c2:7d:1c:4f:7b:
9d:44:3c:e2:3e:b7:04:07:64:2d:6a:df:5e:b3:c7:
11:84:4d:40:df:73:63:ca:70:1b:6c:e5:49:13:55:
96:58:53:b8:b2:ec:80:93:96:34:f5:b4:ba:09:90:
fa:73:5f:5e:96:6c:86:e6:2f:6a:a6:62:92:b2:27:
e6:54:fe:03:a5:25:84:cb:59:f2:79:5c:02:d9:b5:
4d:57:4c:d4:d7:bf:ea:ff:bd:fc:92:9a:63:46:f8:
05:49:4e:c5:37:b2:6e:14:16:0b:ea:ba:72:96:a4:
a3:65:96:53:f3:f3:ce:c8:51:58:e8:31:5f:62:f4:
73:12:92:07:15:65:7e:6a:90:b1:c6:83:c3:cd:98:
82:b9:9d:98:62:2f:24:96:4c:11:21:cd:05:c7:54:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:35:02:18:CD:21:D3:D6:D4:67:0A:E6:93:26:D4:C8:88:85:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3a8ad0c-80b9-3fc5-a24f-2962f73d967e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:a6:42:42:7c:49:e2:06:e1:b3:fd:72:9f:57:fa:1b:52:43:
63:e9:d4:ab:d9:9d:c5:ca:e5:2f:b7:78:a8:7a:1a:3e:39:39:
2a:a6:02:bc:38:4f:13:7e:00:e9:f0:a4:e4:bb:bd:24:d9:30:
59:30:a5:24:f4:05:26:94:ec:ed:dc:e0:d1:9d:73:10:1b:02:
31:34:b6:92:2a:32:53:96:9c:cc:2f:f8:a3:06:33:ed:d1:dd:
cc:2d:73:07:3d:a7:2d:33:37:e4:3c:4e:22:32:0f:97:7a:99:
28:b1:dd:57:6c:18:53:0f:47:77:31:ca:f4:7d:45:1e:9c:4e:
59:5b:39:be:54:f3:e9:09:92:61:f9:fb:a1:2c:bf:67:86:13:
25:a6:33:2c:4b:13:92:9d:e2:7a:f3:a6:25:f7:9c:2a:db:e6:
27:b5:6d:88:1b:01:36:5e:d1:12:34:68:42:de:2d:5a:82:fc:
4f:37:c1:24:ee:6a:59:0d:36:6a:87:36:95:a0:a3:92:0d:26:
e9:7e:68:7d:b9:7e:22:40:bf:6e:4b:af:40:93:53:59:1e:c4:
ab:98:ad:d9:19:aa:f6:fa:24:28:eb:d1:13:97:2d:12:93:95:
53:07:c7:75:26:c8:73:15:ee:65:8a:1f:d5:28:b7:48:33:39:
6d:40:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:24:56 2025 by rpki-client