Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79830dc-9ef3-376e-b26d-fac83df72f1a.roa
File: f79830dc-9ef3-376e-b26d-fac83df72f1a.roa (raw, json)
Hash identifier: dkmwDi1UCSJg/d27gMQWMp7zR0S/iHF1yGTIbu3kvJ4=
Subject key identifier: 9B:70:14:74:FF:2E:33:61:4A:9F:CB:E8:BD:BC:C0:99:5E:4E:75:C1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF6AE55357EF9DBABBD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79830dc-9ef3-376e-b26d-fac83df72f1a.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 48971
IP address blocks: 2001:470:15f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f6:ae:55:35:7e:f9:db:ab:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=2baded87-fc3e-4d64-83c0-0f295b1abae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:31:08:bf:d1:53:40:fa:ef:f4:43:4d:5c:
ca:21:45:e7:64:17:0a:17:de:71:1a:79:74:5d:0d:
18:03:d3:2a:38:fa:e6:47:0a:9a:ca:a1:c9:ed:da:
30:55:1a:59:db:ec:98:b4:65:4d:76:07:25:0e:47:
74:78:e1:be:ce:34:dd:9e:e1:75:0f:01:78:67:13:
cf:d8:dc:74:a6:f5:d0:c2:ec:c0:f4:38:3c:b4:8c:
89:71:80:a3:86:09:64:2d:64:24:6f:37:3e:68:09:
d9:62:9f:2d:a1:40:3f:01:e5:db:ac:17:d0:1d:e5:
62:77:2d:4c:28:a7:96:33:99:00:03:5d:2e:29:7c:
74:38:67:b7:eb:db:87:8c:10:69:b1:bd:bf:36:04:
dd:43:32:93:b9:b9:47:1c:ab:a4:35:5f:f7:fa:ab:
60:87:74:0b:4d:ba:b5:38:b1:f8:35:5b:a6:9b:97:
48:d2:e9:30:c5:9a:e1:77:ca:55:f3:24:0b:29:bd:
c9:d4:a9:a6:5f:9e:a1:7c:d3:5f:52:3e:41:65:cd:
82:bc:43:ab:ec:35:e2:35:1e:54:1d:07:55:ca:3c:
a8:26:5d:31:f7:09:75:5d:b9:39:b6:45:49:cd:24:
c7:25:e6:ae:64:64:7f:dd:ed:0a:43:86:b2:c4:e0:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:14:74:FF:2E:33:61:4A:9F:CB:E8:BD:BC:C0:99:5E:4E:75:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79830dc-9ef3-376e-b26d-fac83df72f1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:15f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:cf:9e:8b:aa:85:fe:e1:11:cc:62:8f:10:65:02:da:a9:35:
44:ec:11:7d:4b:e2:9b:47:5b:52:2c:f4:0a:18:36:9b:e3:28:
6d:4c:41:d2:5c:c6:f0:d2:39:61:79:65:03:3c:96:39:0f:55:
e2:24:8e:b6:d2:9d:22:e3:c9:a1:e8:a8:d1:6f:e3:3f:dd:34:
61:f3:c7:03:5a:77:84:80:a6:ef:76:c1:6d:12:4e:87:d8:a9:
17:08:53:c5:3f:e0:58:68:48:0a:4b:5a:91:44:f5:bd:9c:28:
b0:43:e5:92:66:ff:99:cc:b9:cd:7c:4c:e9:d7:8e:5b:fd:ab:
1b:50:bd:7f:91:0b:4e:33:0c:3b:89:7c:53:48:f6:18:0e:57:
fe:bd:a0:85:6a:ab:9c:8c:3e:6d:8f:6c:80:1f:21:a7:3a:6d:
93:9d:f3:1d:6c:a2:53:a6:f3:ff:90:df:0d:ed:d4:25:e0:95:
54:53:1b:de:0e:2e:24:3d:a8:f5:b1:1c:d7:0d:8d:d3:83:64:
27:af:a3:08:5f:69:59:74:cb:c0:fa:e5:32:c0:7a:b2:a8:68:
69:65:3c:70:fd:82:44:0d:20:08:9d:6a:34:a1:59:e2:26:c8:
08:99:38:4e:cb:09:56:ff:6c:64:d1:23:23:5c:99:16:6e:bb:
fb:20:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:41 2025 by rpki-client