Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/24498785-4737-3800-96ab-1ea37b7bd0a9.roa
File: 24498785-4737-3800-96ab-1ea37b7bd0a9.roa (raw, json)
Hash identifier: 5t7DVlb+oAekug7ARUheGSUPhC3EMNfFSfITXKD9Fks=
Subject key identifier: EC:7A:37:75:31:AC:41:51:35:DF:74:AE:5A:F7:84:E6:3D:54:5C:49
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C4E5B7465EBBFB9696C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/24498785-4737-3800-96ab-1ea37b7bd0a9.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 38158
IP address blocks: 2001:470:193::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c4:e5:b7:46:5e:bb:fb:96:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=7d1ac199-2648-4513-8ba2-a16d868c5191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:38:53:e7:2b:5c:16:5f:0e:28:a6:94:30:
07:44:2a:15:4b:21:ac:2a:c5:9a:5a:5c:3b:ce:4b:
65:89:36:da:6d:a4:02:90:73:71:54:e9:1f:85:cd:
28:fc:da:b2:f0:97:70:2c:f0:df:81:b4:d8:7f:5f:
f7:ea:65:11:b6:6a:e9:a8:78:ba:2a:4b:74:76:34:
62:3b:18:0d:0f:c1:e0:32:23:df:fa:95:3c:05:9c:
15:ab:e6:26:9b:00:19:ef:05:c7:f3:4c:55:6d:2a:
e7:18:15:4c:2c:10:4d:4f:c5:b1:18:83:c6:7f:1f:
15:be:7d:41:cc:dc:cb:49:5d:4f:f7:c8:ef:05:52:
04:87:a1:a7:4e:4d:d2:51:2d:13:d5:79:70:bc:a8:
4a:f0:e1:70:af:f3:42:e1:05:73:90:31:29:7f:7f:
e6:fb:8e:22:6e:fc:e7:30:21:d4:7f:fd:38:19:7c:
a0:e9:68:c2:fd:c1:ed:56:29:05:af:b9:13:1c:8b:
47:f5:02:53:bb:e6:c2:36:4a:4a:06:60:22:67:3c:
9e:a2:2d:4e:0a:cd:6d:82:88:78:39:f3:1e:8d:ba:
78:73:63:4c:72:cd:c7:8b:7e:98:cb:44:49:54:a1:
d3:b2:b0:9b:3c:0a:10:62:eb:a3:a7:8a:53:34:c2:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:37:75:31:AC:41:51:35:DF:74:AE:5A:F7:84:E6:3D:54:5C:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/24498785-4737-3800-96ab-1ea37b7bd0a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:193::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:71:53:aa:6e:4f:0c:c6:04:38:19:3b:c4:5a:92:ee:6d:ce:
08:35:83:70:93:34:07:fa:e2:43:1a:af:08:1f:3d:b6:40:4f:
0a:9a:43:e9:14:44:05:62:fe:d7:23:27:ce:cf:dc:fa:ac:82:
14:b6:ba:03:e6:04:41:26:74:ec:52:92:12:ea:43:9e:83:0c:
c2:22:eb:22:8a:f7:7f:01:86:a3:3b:47:a3:d1:ac:03:73:e1:
36:03:fe:13:7a:07:42:0d:29:9a:75:77:76:de:9a:4f:8a:3c:
53:77:d2:4a:3c:9b:62:a9:e2:e4:b4:49:52:ca:d2:e4:e3:db:
c5:0f:e9:5a:5f:f3:e7:c2:5a:92:64:fe:c4:59:5e:5e:df:73:
7e:55:ea:27:30:db:33:75:8d:be:7e:6c:87:cf:5b:9f:dc:fb:
2d:1f:83:c8:e1:9f:ab:36:68:bc:ad:72:64:08:13:61:80:ab:
5f:ac:db:f3:d9:2b:50:e6:14:01:ff:19:9b:95:26:05:08:ff:
31:19:51:92:7f:93:af:8e:46:8e:fd:0f:00:b6:84:05:72:a0:
52:9d:9e:f9:6f:05:e4:3f:d9:fc:59:9d:4e:77:b6:d5:66:09:
6c:7b:62:9c:a5:d6:79:1a:e7:73:66:1a:43:fa:73:b8:4f:02:
24:17:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:41 2025 by rpki-client