Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa
File: 123ca315-755a-32b7-a7a9-85a41620507a.roa (raw, json)
Hash identifier: lq5C90ThEjSmkKEWtRIXedrxwHF1rkw2bhPHx+BOTdk=
Subject key identifier: 5A:E2:4E:AA:BA:55:FF:D6:96:30:3A:71:CF:39:BD:DD:66:4D:81:D9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848FD56D1C1FC3181AF2926A880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 59437
IP address blocks: 2001:470:328::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:d1:c1:fc:31:81:af:29:26:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=42f86db3-8a1b-43b1-83f7-74d9f5ad7e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:15:01:75:73:5d:7b:d6:e3:26:12:1e:60:
58:90:83:3c:02:94:e1:62:8d:2c:8c:cb:f1:d8:1f:
71:d7:8e:cd:c7:14:57:e7:20:19:82:40:eb:7a:8f:
28:2e:85:5b:fe:d8:23:05:95:a5:97:49:81:7a:8d:
c9:de:24:59:48:d9:54:e4:50:1e:c2:ca:6b:54:28:
8f:0b:34:9b:3d:9c:eb:69:df:ac:02:cb:40:37:7c:
fa:7d:62:17:ff:38:2d:e4:87:87:c9:0f:e9:73:a0:
cc:9d:2e:5e:e7:6b:dc:f3:03:8f:e6:21:c0:6b:e5:
26:9e:13:fa:40:65:b5:88:f9:9f:a6:38:3a:45:4c:
53:28:26:0b:64:64:20:46:7e:a0:be:7f:06:0e:de:
a6:a6:a8:a8:60:08:55:3c:17:5a:89:28:6b:c4:f6:
ff:c0:16:f0:04:07:76:74:8f:c2:3c:89:e1:97:c5:
53:3a:71:d1:d3:01:2f:04:fd:22:bf:72:dd:14:ee:
13:77:f7:60:e3:71:e6:93:55:03:73:e9:61:6f:81:
81:29:8a:3b:ba:0a:ac:02:8a:51:ac:f1:93:bd:47:
ac:74:88:9a:d3:1b:cd:96:24:4f:65:3f:78:06:d8:
69:57:19:10:de:25:d8:43:53:da:df:b3:47:bb:6a:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:4E:AA:BA:55:FF:D6:96:30:3A:71:CF:39:BD:DD:66:4D:81:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:328::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:2f:f9:9e:ff:f3:ee:8e:bd:13:25:bb:6d:53:c6:2c:04:2a:
86:ed:95:dc:f7:e4:25:0c:32:20:c4:22:fd:97:ff:8b:bb:2b:
2c:ae:ab:59:9b:9d:6e:79:b7:fc:bd:8e:8f:1d:fc:23:9c:8d:
9e:9e:59:de:28:ac:4e:ba:6a:06:aa:46:b5:09:ac:0c:f5:47:
d9:03:7c:b9:0e:1a:c1:ce:bf:c2:cf:62:39:e6:c3:0e:5c:3a:
98:45:89:b5:be:5d:7f:5d:33:32:ce:9a:c2:69:c1:f0:47:6f:
76:49:41:7b:44:7a:32:35:cd:cd:af:fa:4f:0d:53:3d:ba:45:
49:45:3a:68:6e:57:55:63:f2:fb:d3:40:34:58:71:c4:74:bd:
15:a4:ba:ee:5e:3a:40:ca:e5:01:3a:e3:ec:af:9c:c8:70:68:
80:eb:11:ef:fd:eb:dc:93:5a:e2:5f:38:2f:a4:46:f0:db:ad:
19:83:d2:a2:71:1b:64:cf:fe:2d:7a:9a:3f:41:fb:16:75:ef:
24:67:67:16:bd:9b:4a:f9:fb:0c:54:07:a0:7e:dd:44:51:55:
b3:59:ce:5a:4a:94:36:a4:81:ed:48:e1:d5:e4:e5:9e:76:2e:
a1:2d:ab:93:c5:3b:2f:a5:13:18:94:fd:bf:4b:9b:e3:72:37:
34:f1:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:13 2025 by rpki-client