Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223d3879-8d9f-363d-bdc4-1bea83fc6165.roa
File: 223d3879-8d9f-363d-bdc4-1bea83fc6165.roa (raw, json)
Hash identifier: X2+mGcO7Rn8nSey1fXb1hOc3/cfcENSCgA8l9Hzk89k=
Subject key identifier: 0F:D5:94:61:8E:06:1B:E3:78:ED:4F:02:CD:B4:E0:B7:08:04:BA:B1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848CC8A29613FBA5D0C810FE0A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223d3879-8d9f-363d-bdc4-1bea83fc6165.roa
Signing time: Fri 07 Feb 2025 02:30:10 +0000
ROA not before: Fri 07 Feb 2025 02:30:10 +0000
ROA not after: Thu 08 May 2025 01:30:10 +0000
asID: 394708
IP address blocks: 2001:470:410::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:8a:29:61:3f:ba:5d:0c:81:0f:e0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 7 02:30:10 2025 GMT
Not After : May 8 01:30:10 2025 GMT
Subject: CN=e3589818-2861-4a04-9990-d76d3f4eef6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6a:06:8f:11:d4:d3:8a:6e:8c:55:a1:d7:dc:
47:a0:ef:7d:6e:28:f8:93:31:08:87:44:94:1a:9d:
7f:06:22:cb:c9:87:b9:5f:61:07:09:af:bb:9f:b8:
d8:19:ab:48:23:f8:26:16:5b:22:99:1f:38:34:92:
93:26:cf:16:83:b6:46:32:06:93:9c:26:85:86:77:
fc:84:a2:fd:f7:a3:a1:8b:de:52:48:6d:71:6d:d1:
94:4c:fc:26:22:71:f4:fc:56:5b:f4:75:52:3b:c3:
23:97:3b:9b:80:ed:08:5c:ad:1d:ae:97:00:18:f6:
29:a6:a4:d2:17:f0:4c:e2:3c:48:92:e1:83:52:46:
b0:8a:5f:91:05:da:71:08:e7:1b:87:c9:5e:f4:cf:
e9:91:70:ed:ec:e9:ba:8b:fa:22:94:88:14:63:44:
77:a2:c0:22:48:bc:02:69:da:f0:94:0e:b3:77:f0:
1a:d2:4d:62:04:4a:1b:7d:36:8d:3b:d5:ff:4d:74:
52:46:54:0d:74:0a:55:d7:21:d6:d5:15:52:16:17:
ee:71:8b:d8:39:e4:dd:74:df:c5:d0:6c:e1:1f:c9:
a7:e6:01:94:46:ed:96:95:fd:22:93:72:67:7e:c3:
70:76:c9:94:2f:d8:bb:be:69:f2:d9:60:63:4f:db:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:94:61:8E:06:1B:E3:78:ED:4F:02:CD:B4:E0:B7:08:04:BA:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223d3879-8d9f-363d-bdc4-1bea83fc6165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:410::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:9f:f7:d2:27:2f:53:81:04:3d:ed:d4:ea:e9:c4:a2:7c:c0:
1e:a4:79:65:20:e2:37:07:4e:99:7f:04:e5:99:39:e1:63:e3:
a5:08:b5:78:77:18:3c:b3:e6:32:58:31:0f:4d:68:a2:0b:fc:
c1:8b:c5:84:55:38:4a:14:ce:1b:76:cd:81:c8:7a:38:25:3f:
93:6e:bd:3f:a9:b3:37:8a:5e:a6:22:77:13:e7:d4:d3:68:0c:
cf:8f:89:ba:0b:8d:11:c1:06:15:3b:da:f6:9d:8f:a4:72:82:
df:07:7f:c7:bb:aa:69:48:30:f6:a4:62:22:fb:f2:3b:97:ff:
59:1e:e0:d8:5a:d7:15:1c:29:1d:e4:37:d7:b8:50:e6:b0:f2:
14:a6:64:92:25:9a:b5:85:bb:a6:33:b1:9c:5d:63:48:f7:dc:
6a:01:09:37:0c:7a:4e:02:8c:62:77:37:d4:48:18:d7:be:83:
63:00:8e:97:06:e7:d5:5a:2e:b4:89:65:c0:1b:cd:88:76:34:
ce:c8:50:25:c9:25:f5:ff:15:7c:66:54:2a:ec:6b:7b:d5:44:
b0:9a:83:ad:a2:1e:18:e1:15:dc:7f:2a:89:c7:cb:e0:79:f8:
a2:3c:7b:e8:27:bf:ce:61:08:5d:8e:ac:cb:0a:23:17:82:bb:
a7:7d:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:15 2025 by rpki-client