Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa
File: 211e541b-a489-3085-9583-5ef6d8a55b16.roa (raw, json)
Hash identifier: SDm6BCsTcR79sGEE7he3FRU5ig8Xd1XqKD5wQoJExo8=
Subject key identifier: 1D:48:29:05:8F:3D:C4:95:02:6E:9F:CE:6B:F0:DD:60:F0:DD:FB:61
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584953C44F6BF1E4A45D89BC3D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 43957
IP address blocks: 2001:470:34a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4f:6b:f1:e4:a4:5d:89:bc:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=c06195bc-e071-4c37-bfa8-d11c77387eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:81:16:08:cf:d0:12:81:b2:63:8e:bd:a4:
2c:1c:f8:d3:25:bb:04:69:50:a9:17:89:56:5d:8a:
93:1e:90:91:52:d2:2f:26:00:93:01:8b:53:b8:fa:
1a:08:92:e1:e4:76:dd:40:7a:97:29:30:53:63:91:
db:29:fc:c5:1a:f1:d6:64:2f:e8:58:6b:89:e3:83:
c1:62:2f:ce:4d:dd:2f:58:db:f4:2b:6d:ac:88:47:
cc:8f:76:dd:e4:9d:3a:56:9c:a6:46:e1:cf:8f:09:
f8:38:2d:f4:16:87:b9:50:b1:5b:6b:9e:f0:9d:84:
00:74:2a:6c:09:f7:69:6d:b5:76:bd:82:0c:54:e4:
9d:62:2d:dc:9c:25:c6:9c:6a:03:1a:c4:7d:fd:12:
a2:4c:40:ad:6e:a2:fd:6e:54:bb:a1:06:2f:fc:92:
45:66:4c:74:cb:9e:e6:91:d8:f6:f0:14:14:fd:45:
57:de:cf:11:df:cc:20:d3:db:ee:4b:f9:c5:fe:5e:
14:81:36:40:20:c1:f1:65:91:1b:f6:7d:ab:f7:a4:
de:f9:e7:ee:0d:0a:8a:03:5d:e2:f3:de:92:54:62:
89:5e:81:f0:c2:8e:7f:d1:ee:85:7d:99:8c:66:db:
e7:07:6f:16:33:6d:b8:be:00:1a:f3:50:db:3a:ab:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:29:05:8F:3D:C4:95:02:6E:9F:CE:6B:F0:DD:60:F0:DD:FB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:34a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:ad:67:50:93:dc:22:76:c0:30:2e:25:c7:c3:57:60:71:61:
4d:19:47:8f:2f:5e:73:dd:b0:0d:a8:a8:7f:a8:07:fa:19:f4:
14:e8:e7:be:71:f0:18:5f:ad:1f:b5:a2:1f:9b:a8:7f:29:8d:
c1:3f:a0:1e:15:27:17:6e:a5:36:b8:23:bd:31:4e:29:38:70:
91:71:1d:72:3c:ef:10:ee:ef:a1:8a:ad:ac:01:5d:54:0a:28:
6e:65:1c:a5:20:99:c8:d9:8e:11:e1:bd:d9:ec:20:9b:67:12:
a2:fc:6c:49:23:48:f2:f3:a0:1b:6c:85:f7:e5:ff:0e:15:93:
44:b8:6a:fa:6a:e4:2d:3c:73:9b:eb:ba:2e:6a:7f:81:43:cd:
41:b1:c1:ab:0c:cc:55:0c:d4:4c:3b:2d:2b:49:bf:75:4d:03:
a6:2f:76:d4:bc:5f:09:74:0f:fc:13:cc:9f:bb:13:9c:12:ef:
cd:15:a7:8d:9f:98:9b:18:49:29:eb:5a:97:4b:74:fa:79:24:
ff:f1:94:49:e2:73:6f:00:c6:71:04:5e:0f:4b:2e:01:62:45:
6f:55:79:5b:65:8e:b6:1b:e1:2e:8c:ef:81:23:0c:05:df:7d:
2a:dd:b6:c2:c2:d2:30:8a:57:6a:10:57:d5:cc:50:32:86:7e:
b1:9a:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:53 2025 by rpki-client