Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa
File: 156f98ff-e026-36d5-9220-a6f870eaa4ac.roa (raw, json)
Hash identifier: 9fohzPsZLXYxY/7E8c8VSmkTg0wTGAY2n7nL5KA6v8M=
Subject key identifier: FF:88:6A:4D:A7:6A:61:A9:17:03:AD:C6:E8:C3:61:4A:C5:9E:9C:37
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858492F87BDBC1838A781EDFA6480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa
Signing time: Fri 14 Mar 2025 13:30:19 +0000
ROA not before: Fri 14 Mar 2025 13:30:19 +0000
ROA not after: Thu 12 Jun 2025 13:30:19 +0000
asID: 212754
IP address blocks: 2001:470:427::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2f:87:bd:bc:18:38:a7:81:ed:fa:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 14 13:30:19 2025 GMT
Not After : Jun 12 13:30:19 2025 GMT
Subject: CN=e8496196-6323-4f0d-956c-a17908bc411b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:1e:0d:88:87:4e:1a:a0:fb:f7:89:95:b8:
d5:7e:58:cc:74:a7:40:a2:c9:b5:97:fb:36:25:f0:
78:a8:b0:7d:ef:ae:dd:5e:6b:be:0f:78:03:c1:95:
2d:11:8b:78:03:3e:01:e7:94:69:12:6e:3f:14:de:
0a:fc:9e:17:4b:22:dd:34:31:81:32:be:ad:43:7e:
42:a2:12:21:00:8e:26:35:78:c1:16:09:9d:f7:98:
a6:52:0a:57:ce:83:e4:2e:ed:b7:68:99:a6:59:d5:
e8:c7:bb:24:1e:f1:7b:ad:22:3a:d6:b9:74:0a:a7:
68:1a:a8:4f:67:5f:e1:51:b6:3b:0e:bf:3e:a7:8a:
74:e1:58:8e:b3:ce:fb:de:f2:f0:87:bf:b4:53:6d:
27:c7:c9:ca:3d:6e:c2:69:93:b5:4e:c5:7e:66:2c:
29:73:f0:34:5d:1f:42:7f:02:37:4c:a3:f0:fd:70:
66:c6:0c:36:58:9b:1a:17:19:07:e4:7e:27:29:59:
1c:43:2a:21:7c:c9:c2:0d:b5:03:d6:8b:95:bd:5f:
3a:9c:ca:01:d8:0c:2b:6e:14:0f:91:80:c4:10:16:
4f:6e:30:ef:c5:31:43:03:45:1b:dc:39:33:a9:a6:
75:32:a5:49:90:ef:f6:cf:ef:e3:1c:ac:8c:cd:54:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:88:6A:4D:A7:6A:61:A9:17:03:AD:C6:E8:C3:61:4A:C5:9E:9C:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:427::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:7a:75:ae:7e:c0:73:f3:f1:dc:2f:37:c2:3b:cb:46:17:c3:
ba:31:b4:fa:04:aa:f6:b0:15:9f:5b:90:5c:18:81:4a:a6:e1:
51:59:93:9c:8d:ad:bc:31:57:04:6b:77:9d:f4:e8:b9:ea:9c:
9b:9b:91:07:08:8f:ef:38:d5:6b:6c:87:f4:42:03:ef:cf:0d:
5e:82:60:48:f8:63:63:c5:ae:63:c5:5f:d2:8e:d9:78:25:62:
18:9e:29:2d:6d:a0:17:96:50:91:fe:2b:79:85:81:f1:53:12:
f7:65:6a:19:a1:05:43:cc:61:f8:03:d1:f2:ec:98:96:c2:dc:
bd:4d:f1:4b:d3:b5:b5:3f:26:a6:4e:3b:67:75:47:ed:e4:65:
3e:8d:0e:31:d0:6f:ab:c4:ac:59:d4:63:6b:ef:68:09:f8:82:
39:82:bf:10:3e:40:46:fd:64:8a:18:12:07:5f:94:59:e6:71:
b1:1e:db:6d:b9:49:56:04:91:ea:b5:fe:e2:a7:f1:a4:ab:4a:
8b:85:9f:9d:dd:3f:31:15:6b:02:92:25:5e:14:89:4b:2c:e1:
27:ab:c4:cb:17:35:9d:d8:3d:85:c0:33:74:43:72:83:ff:31:
27:19:a6:82:a0:58:b5:72:0e:bc:4d:69:73:0c:dc:25:89:ea:
c2:76:7c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:24 2025 by rpki-client