Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa
File: 1c1d9b1b-aae0-33de-9996-50958fe5794a.roa (raw, json)
Hash identifier: NeqgqKPQEEx8kDhsFn3detiD47jDgzHe+Teenqhsbt8=
Subject key identifier: 73:60:2A:5E:7B:6F:17:95:78:E4:DA:92:67:3B:37:93:EB:52:FD:41
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848960B496A2393750BD80D3680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 140577
IP address blocks: 2001:470:3bb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:49:6a:23:93:75:0b:d8:0d:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=454cca23-d6ca-4710-9c1e-9fc6dab9a6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:1f:37:f4:0d:04:83:6c:eb:be:3c:00:57:
65:56:89:8b:f2:4a:90:61:ba:1a:dc:e1:b2:7a:1b:
0b:08:f0:8b:b6:e4:8a:2e:83:5c:a2:8c:aa:4f:ca:
66:30:fc:6e:d1:0c:3b:3a:5f:07:04:0d:e6:21:11:
fa:29:1d:8f:31:28:31:7b:e5:af:7c:96:24:8e:2c:
7d:d8:14:8f:f1:6e:2b:f7:8a:d0:40:22:9d:cb:2f:
5c:c2:81:39:99:83:77:ad:63:e3:89:3e:bb:e5:f0:
a6:f0:f0:51:b0:5f:ab:0d:62:da:ec:d0:93:9d:09:
bd:47:60:80:3d:56:9f:f5:91:16:44:ec:57:81:42:
e3:b6:ec:81:df:31:74:d0:82:f6:c7:94:c6:bf:49:
c4:95:d2:ef:a1:f3:80:fb:c8:b9:59:3f:6b:7e:46:
77:c0:5f:7f:90:22:56:8c:da:b8:fc:9f:9c:92:e5:
f7:a9:0b:23:74:bd:8e:9f:31:59:1d:0a:c0:0c:d2:
6a:f3:ec:20:72:28:09:46:79:27:e0:c4:7b:dc:17:
fe:e5:42:62:d7:f2:b1:f6:a6:f4:45:c2:63:58:f9:
ce:2f:f0:ee:67:35:5d:82:a9:a7:ce:7f:b4:e2:9d:
6d:f3:b0:05:f9:de:43:6f:c6:f4:9e:7c:72:43:a4:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:60:2A:5E:7B:6F:17:95:78:E4:DA:92:67:3B:37:93:EB:52:FD:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3bb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:36:c8:f9:8d:31:61:db:43:4f:ce:e0:3f:10:4e:cf:25:7e:
a3:36:7f:2f:db:d3:87:93:b5:a5:ec:0d:dd:34:6d:c4:58:66:
95:b1:a6:05:c7:c1:31:15:ea:fc:77:e2:e9:64:0e:47:e5:8f:
46:19:78:da:fe:eb:90:8f:d6:74:01:e8:84:73:ca:9c:55:b7:
73:e0:87:f0:56:58:8a:d3:7c:9d:85:7e:50:6c:31:3c:f1:74:
29:80:81:e8:94:82:b5:0a:2b:d6:e9:b4:39:31:34:0d:12:91:
51:75:92:1e:cf:0e:75:65:c6:b2:40:91:df:b1:72:f5:3a:8b:
fd:ab:98:d7:b7:d4:ab:b4:72:ba:56:e1:36:db:8f:52:89:48:
8e:9c:b7:6a:8a:6a:66:c8:ce:ac:f0:b1:6d:7f:79:06:fc:49:
bf:ad:3f:f5:80:99:b8:f1:52:e0:a0:01:92:95:76:63:55:cb:
ae:6a:ad:fe:27:08:e8:5b:1d:c5:39:96:67:ba:22:c5:be:d8:
b7:e5:15:ab:16:d0:ad:70:af:2f:24:83:83:b4:63:95:79:0b:
38:21:c2:0a:34:ed:1f:7d:0a:5e:be:bf:6e:1e:b7:dc:a8:c7:
cd:33:f7:c8:3e:31:99:b8:de:d0:fc:23:67:c0:8b:98:ae:32:
85:02:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:45 2025 by rpki-client