Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16b449c0-83f5-3337-8824-aeec31b123c4.roa
File: 16b449c0-83f5-3337-8824-aeec31b123c4.roa (raw, json)
Hash identifier: PsVEeVNNDxd7Xh/oz+ismy4Iw1Uylg83Y/tRtPLlPVc=
Subject key identifier: C4:C4:EC:5D:A6:1D:20:B4:BA:9C:63:7C:8A:46:48:5E:58:CF:19:FB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849446943E0C8A6511432366100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16b449c0-83f5-3337-8824-aeec31b123c4.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 59953
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:43:e0:c8:a6:51:14:32:36:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=d28b42dc-5315-4ed7-988c-eecf1294f828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:a9:cc:da:1d:3d:a8:60:df:c2:4d:fc:88:
82:98:f6:9a:86:89:63:be:21:92:58:8d:64:81:48:
eb:44:df:61:3c:63:fd:12:02:41:7d:0f:6d:f5:28:
78:7d:2a:d4:52:67:1c:7f:76:73:7e:2d:c4:58:a4:
1d:c4:72:ff:c0:d9:2e:a1:5a:7d:a8:94:4f:c4:88:
b5:0f:96:26:e4:7b:c4:f0:5f:1d:2e:19:1f:56:3f:
7d:6c:c6:5c:49:7c:17:15:9b:c0:84:eb:e7:ba:f2:
ed:39:1a:a0:21:ce:b4:ca:90:a3:6e:92:be:c5:f1:
0c:28:8f:2a:91:f0:9f:8c:a6:98:06:3e:eb:24:39:
b9:9c:77:ae:4d:16:d8:d7:e6:09:a3:a7:98:21:11:
b0:b8:85:33:2d:e0:d0:72:cb:83:bc:ed:05:c6:12:
06:2e:83:8b:0c:04:83:58:ed:2a:f7:fe:2b:ff:4f:
ea:20:3e:4a:11:a5:7b:8d:72:27:b5:44:e7:b9:e2:
f2:60:b9:e6:b1:53:b8:a7:3f:e8:36:b3:05:99:8c:
0a:a9:42:96:b0:07:aa:7c:9b:72:37:b7:b4:1a:87:
ec:21:8f:04:58:8c:79:15:e0:8d:5e:4f:8b:0d:e6:
c3:28:53:cc:e4:6b:4c:35:4b:a0:6f:36:c3:9a:8e:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:EC:5D:A6:1D:20:B4:BA:9C:63:7C:8A:46:48:5E:58:CF:19:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16b449c0-83f5-3337-8824-aeec31b123c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:01:66:18:38:0c:73:7a:1d:49:82:26:32:38:42:c9:f3:2b:
36:ec:03:12:fd:07:d5:2f:22:0e:eb:2d:51:22:87:e4:de:d3:
f4:ad:48:18:9f:48:2d:51:02:51:b4:ce:58:b7:88:bc:70:0f:
d6:23:70:f2:5f:45:a5:1c:00:17:f3:de:66:b4:b1:c0:30:74:
f3:80:05:e0:5f:db:b4:fb:58:35:65:39:73:17:6b:a6:b1:6b:
ee:b8:93:63:49:b1:be:29:35:e3:9e:98:9e:9c:93:bd:97:06:
8f:14:5e:29:92:fa:3e:e9:1c:92:49:f7:a4:64:1f:cb:23:d8:
c0:5f:ae:80:7f:d8:0a:83:56:06:7b:13:29:f7:f7:81:ae:88:
9b:57:a2:f9:d8:42:a9:db:e6:7d:0a:af:0d:f9:c3:d5:83:ef:
50:cf:81:e0:19:7a:d8:de:72:4c:fd:27:91:54:93:19:49:0b:
a4:c3:d5:01:76:45:9f:69:37:57:ee:b7:22:94:85:ea:03:91:
d8:2a:4c:db:97:53:e2:bc:8d:54:19:66:b1:da:5f:94:00:54:
fa:7c:30:67:af:a3:f8:d8:0e:32:2d:a5:16:ba:4d:56:7f:25:
df:ae:cb:0e:38:a6:a1:e1:57:a5:95:01:7d:cd:46:73:ed:30:
15:6b:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:47 2025 by rpki-client