Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa
File: 023eb0c5-6621-36f4-b644-b1d687cab0f3.roa (raw, json)
Hash identifier: hJglR06QXhjPPiwl+VwobvVNk+66kD4a+WcHUk0K3gc=
Subject key identifier: 51:73:2A:7E:F5:E4:13:F4:EC:CF:9C:75:C3:E4:99:9C:99:15:E6:69
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926B9ED12F6497B773289F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 393238
IP address blocks: 2001:470:55::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b9:ed:12:f6:49:7b:77:32:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=e84f5ae2-ce83-4ff7-b5da-5e400490232c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:ee:ba:f4:e6:03:28:61:5a:c6:6a:55:87:
c0:b1:20:b3:6d:11:e6:02:c8:2c:4b:d5:af:bb:75:
8d:8a:c2:95:76:da:5c:8e:9b:19:eb:1c:fa:1d:17:
6c:e0:92:61:3f:9c:1e:0c:57:ff:3d:dd:f7:81:3d:
85:23:5a:2f:2b:93:e2:b9:b8:0a:19:a9:c0:08:5e:
44:95:72:99:97:0e:c6:84:07:20:cf:0c:5d:2b:e7:
bf:f7:ff:b3:12:f2:c8:f5:5e:46:88:7e:81:a7:fe:
30:e8:5d:cf:15:ce:ff:9c:8f:23:42:0e:37:79:9f:
cf:9c:80:78:26:e7:0c:3d:55:69:32:f1:1c:05:63:
2d:41:68:6b:6f:d4:1a:fd:ee:d0:3c:7a:69:8e:68:
25:63:54:c9:a5:c8:0e:f1:fe:15:5e:e6:f2:74:d7:
74:7a:0c:c9:b2:fe:1e:4d:0c:30:43:4d:e2:30:de:
f6:ce:97:a1:bb:e6:27:ee:ec:d8:15:2d:d1:00:00:
41:0a:a4:03:ab:d8:df:dd:3a:8d:17:35:f0:5f:e6:
be:6a:cc:f2:ef:6d:f7:6d:2a:06:51:f3:75:71:52:
46:18:9c:13:31:79:ab:81:87:71:b6:4f:0b:db:70:
dc:87:fe:fc:18:f2:3a:51:14:9b:d1:45:72:43:89:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:2A:7E:F5:E4:13:F4:EC:CF:9C:75:C3:E4:99:9C:99:15:E6:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:55::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:a8:c5:f2:6e:53:e9:7c:3c:b3:b5:e0:05:5b:12:a9:5b:1c:
4a:28:d3:3f:5c:76:49:46:a2:8e:39:8b:12:8c:52:8c:71:52:
23:d8:be:2a:a0:9a:45:fb:40:46:67:d7:eb:e2:ca:26:66:9b:
32:d6:3a:1b:79:39:ff:f3:6e:77:3c:7d:dd:e8:69:be:90:3f:
21:d6:d2:a4:87:90:cf:ba:a2:63:63:14:0d:e8:31:4d:fb:33:
a1:ed:cf:56:4c:01:28:20:ef:01:df:69:d6:c4:a1:07:3a:0d:
e1:9a:34:df:af:57:ab:aa:69:7b:bf:a8:a6:5c:b7:4f:c6:7e:
27:e4:6d:d7:59:e0:fa:f8:b7:8b:c6:bb:6f:b8:45:28:74:14:
53:02:3d:ce:e3:fa:80:b5:e3:6b:ef:71:d2:73:98:a3:26:20:
c0:c5:4e:ea:11:a3:cc:36:5f:a1:f9:91:8a:7d:2d:af:74:db:
1f:49:90:a6:f3:30:9f:6a:61:b6:a7:50:6d:7a:3a:92:be:6a:
0f:91:2b:34:6f:31:09:2d:61:ba:a7:a3:29:05:07:51:4a:8d:
43:69:0f:01:dc:1e:28:f8:08:e9:dc:f0:86:d5:55:77:b3:e8:
14:5f:81:ea:98:c7:63:6f:c4:73:d8:68:0c:87:96:fd:da:21:
1e:83:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:54 2025 by rpki-client