Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1f61cd5-3d6c-3e1d-b7f7-56aa4e44e826.roa
File: f1f61cd5-3d6c-3e1d-b7f7-56aa4e44e826.roa (raw, json)
Hash identifier: +q12cEF+LitGDtSeJVSaazgNEc1PJnvDPgkCBTTm9LU=
Subject key identifier: 5B:47:15:BE:84:25:C1:53:95:52:1D:1A:2D:2F:64:F6:F9:8D:9C:EB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEC621643BA789546BB40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1f61cd5-3d6c-3e1d-b7f7-56aa4e44e826.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 393259
IP address blocks: 2001:470:b7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ec:62:16:43:ba:78:95:46:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=502b4ea5-41bf-4146-a53d-e14cb16eef4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:e6:cb:ae:4b:a0:8d:45:58:6f:4a:16:e0:
29:5c:95:75:1d:22:31:46:9a:59:5d:46:ab:28:09:
5b:7e:d7:c0:03:39:5e:ff:2d:e6:c6:8f:be:e5:7e:
2b:96:37:0d:78:e1:62:7c:3d:4b:26:94:7f:73:29:
8f:04:a7:0c:36:50:9d:e3:8e:54:0d:db:bb:d2:9e:
be:d2:3c:8b:3f:b8:30:d7:15:b0:34:21:f3:85:93:
e5:f5:93:00:14:73:5b:d5:26:c7:a4:ad:ac:01:2b:
1a:ce:94:f3:b2:a0:40:61:6c:e1:da:87:1e:68:2e:
74:55:d3:b1:f0:46:25:93:82:a5:1d:e1:5f:92:83:
c1:3b:1a:f5:a2:e9:de:06:36:f1:26:9e:9e:0c:a5:
19:91:af:45:50:67:f4:02:53:b9:16:54:19:70:38:
80:11:f5:2a:c3:ed:fd:e1:bf:d8:c9:1b:0b:eb:52:
c7:88:71:b4:52:08:c5:9b:26:b1:24:e2:3e:f5:57:
57:9d:7a:49:17:6e:d8:76:b0:58:3a:c3:36:47:dc:
96:4c:a9:f4:bf:e2:1f:6f:1a:8a:2d:cf:95:fe:b2:
c4:17:20:0f:0e:0a:38:63:36:72:5e:58:1d:40:c6:
36:c5:0b:1d:c7:e4:c3:d9:60:18:4a:58:5f:bd:65:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:47:15:BE:84:25:C1:53:95:52:1D:1A:2D:2F:64:F6:F9:8D:9C:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1f61cd5-3d6c-3e1d-b7f7-56aa4e44e826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:48:d8:f2:4a:06:0c:1a:2a:4b:1c:b8:fc:35:d7:e8:57:1d:
ef:cf:b5:ce:ba:67:39:f5:a1:24:20:fb:87:fa:0e:0b:6c:e9:
c7:2b:4f:57:7f:14:39:16:16:e6:6f:07:d1:2f:5e:19:be:61:
e2:64:0b:d2:bb:e3:3f:b0:ec:a0:22:7c:41:5e:64:17:8f:5d:
cb:93:ed:8f:c3:07:a4:d5:7b:c8:35:96:35:7e:ca:ee:e7:85:
8f:33:ef:ed:3a:19:97:7b:7c:eb:39:91:dc:dd:db:50:35:1b:
4a:36:b1:1b:d0:6a:9d:2f:09:84:0e:c1:6b:01:89:4c:8e:2a:
bb:83:3c:ac:ff:4f:6c:98:73:de:4b:87:1f:32:ae:70:28:b9:
3d:82:03:02:e8:a6:9c:5d:04:50:ef:08:64:d2:0c:d7:80:a1:
cf:95:e3:ec:73:a1:72:1b:9c:6a:99:66:92:1b:2c:c2:c2:be:
7f:b9:58:e2:46:8a:47:91:11:c5:86:df:22:e1:36:23:14:14:
60:bc:71:da:db:ce:e7:df:a9:ac:0c:76:7b:92:d4:80:11:0c:
62:30:68:37:a8:11:3d:55:60:7d:62:cb:25:fa:d7:09:9b:07:
18:11:08:1c:da:c0:e6:cb:41:54:6d:84:8b:75:61:0a:5e:e1:
4e:56:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:16 2025 by rpki-client