Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1f93516-aa08-3098-b889-9325fcd5a8ef.roa
File: f1f93516-aa08-3098-b889-9325fcd5a8ef.roa (raw, json)
Hash identifier: L4ZU5fKLr9LApPqnaQd6iOpyOUvAQRnt5Ca2uJHIUnc=
Subject key identifier: 60:EA:92:DF:D7:1F:34:20:63:BB:D8:02:97:D6:C2:2F:03:FC:38:F6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01FE6527B15AD53413C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1f93516-aa08-3098-b889-9325fcd5a8ef.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 8100
IP address blocks: 2001:470:2c9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1f:e6:52:7b:15:ad:53:41:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=4344ccbc-584a-4ed0-9900-e6ba95858b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:b0:33:8c:43:71:b0:c5:d9:9d:69:18:0e:
dd:e0:c0:a6:bb:23:dd:00:b9:cf:30:2c:fe:5a:dc:
e8:43:c3:76:7a:70:13:0d:38:65:dc:78:c4:4a:d3:
20:9a:11:7d:60:26:02:07:7c:dd:74:4c:d3:66:2b:
81:f8:a2:73:dd:62:fc:66:e0:3e:88:6f:95:93:1c:
67:63:e0:b0:f2:72:40:8c:48:ee:ff:06:fc:a1:8c:
34:af:46:aa:6a:ab:a7:e7:b9:4d:18:f6:46:ca:7c:
2b:6e:47:99:22:d8:0b:df:a1:42:ea:d6:db:fa:87:
c4:e1:1f:b3:b4:c4:a8:3b:16:5d:10:ca:75:4f:ec:
3f:20:26:df:07:85:04:0f:c6:74:94:b6:b8:76:fe:
5b:46:33:a4:db:3e:88:6c:7c:2f:f3:6e:3e:27:54:
06:e9:ea:c9:d9:66:b8:91:4c:cb:44:1d:52:4a:53:
34:61:3e:ad:36:7a:8a:15:78:97:5f:0a:4c:64:f8:
cf:ee:45:3a:f6:f1:35:c8:03:f5:4d:19:a2:5f:3d:
f3:ef:24:1d:d0:1d:40:c1:58:26:c2:c8:7b:31:d1:
c8:1a:bf:91:73:26:2f:31:71:8f:f6:93:21:17:eb:
40:ad:6d:9c:57:17:f3:52:b8:49:39:70:20:cb:9c:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:92:DF:D7:1F:34:20:63:BB:D8:02:97:D6:C2:2F:03:FC:38:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1f93516-aa08-3098-b889-9325fcd5a8ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:37:7c:61:22:75:92:3e:35:d7:17:64:73:e4:e9:ed:6d:ce:
f8:8a:75:38:ac:24:35:97:28:d1:a8:36:24:64:08:86:0d:f4:
25:47:38:af:cb:79:b1:f1:b9:5a:64:a8:54:c7:7c:c2:b7:00:
a6:1f:ee:3a:8e:71:5f:af:23:d8:78:f8:5d:fb:21:6a:04:22:
9b:37:be:01:c7:a2:27:74:65:44:f9:6f:73:3a:dd:0b:74:79:
f9:2d:37:a1:a1:3e:aa:a7:b4:e8:d7:da:8e:fc:b1:ad:af:87:
1b:8e:55:9b:5d:5b:16:08:cf:e9:99:a6:f9:cb:6f:92:b1:50:
d9:54:2e:04:55:ad:15:7d:f2:4b:83:a0:53:6f:3f:38:98:96:
0c:12:c7:57:4a:bf:4f:22:91:c0:27:7d:95:6a:86:45:4c:1b:
ef:b0:9a:f9:53:be:e8:62:62:b4:72:55:55:36:17:30:37:cb:
b8:83:73:8f:26:64:c1:c2:2b:d8:26:cb:98:2a:99:a5:8b:8e:
82:2c:1c:f1:09:83:c0:e1:1c:e9:72:88:2f:22:50:1a:c6:f2:
3d:39:97:6a:3f:44:58:4e:ea:c7:9c:e4:ac:22:68:b1:45:17:
6b:f9:70:91:3b:95:62:04:01:52:d5:fb:6a:ac:eb:b7:ef:c9:
4e:8f:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:42 2025 by rpki-client