Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec90df8f-4133-396e-8eae-550ff09b5cfb.roa
File: ec90df8f-4133-396e-8eae-550ff09b5cfb.roa (raw, json)
Hash identifier: W0R1sxwQ9GUwtXSiWJDXmqUbhRJOwg6g+/wuLJ/mGrY=
Subject key identifier: 48:9B:3D:41:55:A3:E2:7F:D4:D1:61:66:F3:CF:33:AD:1F:41:70:E7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858488AE0B3A2F40F25CFB9008A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec90df8f-4133-396e-8eae-550ff09b5cfb.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 14979
IP address blocks: 2001:470:305::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b3:a2:f4:0f:25:cf:b9:00:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=ef98427a-1a8d-4908-b770-7e3ec16f6f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:64:6e:f9:da:e9:95:b7:7c:7f:7d:b1:2f:
18:63:1f:da:5a:63:45:bd:40:aa:03:1e:0b:74:85:
e2:4e:79:62:40:74:ac:97:f5:43:e4:17:b0:3e:2c:
00:04:f5:7d:63:68:f9:5a:f3:18:10:61:0c:e5:94:
a8:05:01:29:50:ef:3e:5d:8e:fd:14:4d:64:59:5c:
56:38:e5:29:7a:6a:58:89:df:1f:f0:ab:8b:8d:35:
be:93:42:78:39:c6:fb:ed:c0:6a:00:41:da:6e:63:
18:ca:29:36:3a:f7:db:79:cf:a0:37:59:89:65:2f:
ea:e3:a4:e8:98:85:11:45:92:b0:8a:8f:c8:47:ee:
3b:c3:89:39:a6:3b:57:64:f8:de:87:63:99:ca:87:
db:bd:fd:d8:f9:ed:12:f9:86:df:2b:af:ae:60:0e:
77:08:75:dc:9a:85:72:15:cf:4b:01:be:ba:be:4e:
4d:68:b3:7c:d3:1e:95:31:39:ed:22:09:ea:9c:23:
52:94:68:a1:f3:fd:d7:bb:08:56:29:28:59:b5:fb:
f2:88:0c:89:04:e8:4c:d8:e4:c1:86:90:fb:ca:80:
00:08:b2:2c:c7:61:d1:2d:78:cd:1c:7c:2f:7f:79:
da:c0:0e:56:fb:66:07:7d:75:78:30:3b:0f:9f:28:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:3D:41:55:A3:E2:7F:D4:D1:61:66:F3:CF:33:AD:1F:41:70:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec90df8f-4133-396e-8eae-550ff09b5cfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:305::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:09:39:2a:6c:9c:1c:c1:cd:5b:b7:5e:32:eb:ad:a6:b6:e1:
5d:06:42:b9:09:54:63:18:68:92:4e:45:70:67:15:16:ab:87:
03:95:a9:f6:3e:e7:c2:10:f1:22:17:94:38:12:6c:50:1d:e6:
17:4d:15:0d:82:a2:db:b3:de:f5:4d:c6:f0:0c:f2:a0:1b:6d:
2b:55:14:64:7b:ce:d5:a5:3f:c9:ba:54:7f:41:7f:71:1c:50:
fc:0e:fa:4e:38:32:bd:cf:c6:fa:3c:6b:a6:6f:ff:d1:c8:dd:
08:43:b5:7e:85:8a:b6:0a:b6:4e:47:ea:68:f0:d4:6c:83:32:
85:08:7d:39:5b:fe:c7:3d:54:f3:70:b2:a3:df:f5:af:8b:12:
92:9a:88:fc:5d:14:64:6f:50:f4:70:91:0c:90:6a:53:88:43:
18:0c:22:23:ab:87:d4:2c:d8:ce:13:da:f0:b8:96:38:2d:a9:
bd:9a:d7:7c:f9:0e:37:9f:d6:8a:77:85:53:ec:a8:2f:f3:ea:
dd:45:f4:79:50:93:3f:4e:fb:34:3a:07:cf:c6:a5:b6:40:f6:
10:03:05:18:61:7c:1f:4f:bf:2b:bc:5a:22:6b:6d:56:87:e0:
27:ea:d8:59:3f:0e:f6:fc:e0:c4:e5:94:27:70:07:96:c3:86:
42:64:24:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:21 2025 by rpki-client