Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa
File: 1d2421f9-87ef-3929-99dd-f65e9e96725f.roa (raw, json)
Hash identifier: jjyybWCE07+lwUM7KHzlWD5/526KpvUtNlthWoL7I9U=
Subject key identifier: D6:F7:94:A3:57:04:93:97:FA:CF:AE:F1:D3:DE:26:C9:B1:0F:C0:BD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E4B300BA7FEE88D8E700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 135423
IP address blocks: 2001:470:291::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e4:b3:00:ba:7f:ee:88:d8:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=46a6c3d5-9d85-4d8c-8996-ae5a90700b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:f4:cc:5b:bb:7d:aa:df:50:df:6b:f7:3c:
94:7e:cf:58:c6:8a:f7:38:12:f9:b6:a4:fb:f3:0b:
a0:42:ac:b3:89:f3:b8:f6:b0:25:8f:fc:87:3f:33:
b7:e0:1b:90:bc:43:c3:28:a7:04:39:ea:26:4d:47:
4e:e9:91:a4:c4:11:40:35:ce:1e:08:fe:0f:3b:1c:
5c:1f:fc:b0:cc:d6:f4:b0:28:c1:b5:45:71:03:a6:
fe:64:bc:e8:c3:ad:a3:0d:9b:ac:8a:fe:c4:04:a6:
d3:dc:d5:39:89:f7:fe:14:4b:b2:e1:17:03:fa:d4:
d3:50:33:25:96:1c:8a:3a:17:22:de:4d:d0:0a:30:
c9:d7:88:af:64:31:a2:0e:db:8c:01:ba:b7:33:20:
85:d0:33:f4:a4:69:36:54:1b:44:d8:3a:c3:1c:d9:
a7:70:15:c5:4e:6b:ec:6e:81:72:20:ce:b8:a9:8d:
f5:e8:ee:1f:d0:ee:8b:f8:ad:ca:b7:b3:15:4d:2d:
ad:c1:9e:69:eb:46:dc:80:47:7c:45:91:bd:aa:36:
79:7e:36:b9:fb:6b:8e:81:26:ca:1b:d2:62:2b:c8:
bc:d6:1f:cd:28:3e:a8:ab:9a:b4:9a:c0:09:0a:4e:
6a:83:ff:cf:b2:c5:bb:66:38:ae:47:60:4f:43:4c:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:94:A3:57:04:93:97:FA:CF:AE:F1:D3:DE:26:C9:B1:0F:C0:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:291::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b6:1d:12:5a:25:ad:8c:5e:7e:49:c8:20:46:b6:43:d3:a0:
77:4f:4a:34:6f:73:fd:75:3b:82:b0:fe:09:66:b1:89:a9:40:
ac:65:2c:f2:fb:1a:ef:88:33:09:1a:d5:f2:1c:b6:6c:69:99:
4a:23:2c:59:ab:c0:76:e4:6e:72:20:a7:02:ec:e5:06:60:9d:
e8:2d:f4:bd:95:f5:23:0d:19:95:c5:da:14:c7:a5:92:9c:bc:
77:1d:d5:14:e3:7a:ba:f4:69:be:49:c7:53:99:70:92:2b:6c:
9b:02:ca:37:65:c2:21:2d:72:35:01:ec:e2:19:78:f7:d9:ea:
01:61:dd:4f:9f:e9:41:94:0f:7f:e3:18:93:83:4f:8c:4a:20:
93:e6:e8:81:d7:3f:7b:29:98:0c:0e:35:a9:3f:97:a1:da:c2:
dc:b8:e3:0d:90:ec:70:93:98:20:d0:94:e3:be:4e:2b:d7:57:
f3:4b:cf:e1:68:5e:cb:98:1b:39:ab:00:a5:5d:0f:9c:c6:88:
9f:f4:b8:67:a3:9a:64:0b:5b:1a:0d:6b:67:fa:f2:6f:ff:c7:
e6:69:81:77:c1:4b:3c:08:38:23:21:f2:8e:a2:95:3a:1d:85:
bb:e3:a5:58:ee:b4:23:70:94:73:ba:97:32:e0:a9:36:07:8a:
1a:19:7e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:55 2025 by rpki-client