Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26825656-99ed-32e9-b9b5-794b506d6907.roa
File: 26825656-99ed-32e9-b9b5-794b506d6907.roa (raw, json)
Hash identifier: ACm3VU1qa69V51gInp+URgirlT91nPTviTekXVYo1u0=
Subject key identifier: 46:88:A7:E3:A9:82:E8:01:74:7B:C7:E7:47:85:BF:EA:38:5B:CE:E7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DE4F7A50A3032F8EAB40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26825656-99ed-32e9-b9b5-794b506d6907.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 55003
IP address blocks: 2001:470:1c1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:de:4f:7a:50:a3:03:2f:8e:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=e9fe7b91-ddda-4a13-bcc3-ced34a9a1b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:56:27:20:e9:8a:f2:8c:2e:5e:07:ee:5a:
90:c3:e4:24:da:99:cd:42:f9:cd:a1:ad:eb:67:b1:
f8:02:e4:66:68:28:97:64:4d:dd:9a:85:fc:2d:01:
5f:38:89:4f:79:66:44:2b:14:eb:d6:72:f6:00:9f:
93:79:44:9a:75:16:33:36:ae:b6:65:59:d2:6e:49:
2d:37:0d:71:6b:1f:d0:82:6d:a0:2e:57:99:56:b0:
1e:28:4c:09:9e:07:6c:d3:9f:51:67:2d:46:ba:66:
e0:e5:9e:cc:f0:42:85:06:1c:80:e8:97:6d:0d:9f:
b5:a2:56:12:39:40:ea:f9:66:9a:21:d1:65:9b:f1:
ee:43:98:6c:15:a6:1b:de:a5:87:e2:8b:9b:54:8e:
67:0f:c9:7c:b1:9d:df:5a:3e:57:1b:60:95:c1:0e:
f9:7f:af:e3:79:0a:fc:8e:99:56:cf:cc:26:ce:4e:
61:71:9d:13:86:89:43:ee:57:ff:59:19:1c:b7:35:
f1:95:0c:3d:cd:fd:73:cd:0c:e5:e5:8f:15:7c:58:
18:33:09:79:3f:18:6a:c7:66:ec:71:06:94:cf:e3:
fe:b8:3d:23:59:b7:15:e0:74:b9:76:fc:ca:a1:55:
71:39:38:23:99:24:42:5b:a5:3f:2f:ce:89:1b:0f:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:A7:E3:A9:82:E8:01:74:7B:C7:E7:47:85:BF:EA:38:5B:CE:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26825656-99ed-32e9-b9b5-794b506d6907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:cd:57:11:41:9e:c0:bc:37:3d:23:b4:24:18:b7:7d:18:61:
ee:cf:58:75:48:61:8e:f2:14:c4:38:8b:d6:ce:31:77:00:ff:
b8:ad:eb:e2:b1:03:55:3d:65:5e:ec:c1:2d:73:50:01:1b:a0:
35:6c:85:38:f1:f6:d9:e1:56:7b:be:2a:f1:ca:0c:4c:0c:2b:
22:8c:50:db:65:bd:fb:37:e3:7f:68:a2:4f:95:64:04:2c:28:
cf:37:d8:32:40:67:32:1b:b6:87:82:c8:fe:2f:15:08:a5:f1:
53:66:f2:51:8f:98:71:75:b8:e2:c3:de:0f:a3:19:d7:a3:6e:
2d:df:8c:a0:cf:5a:4c:ac:8f:4b:76:43:0c:50:de:a0:15:73:
bf:28:74:f2:df:69:06:83:53:2e:e3:ab:4e:a6:f6:12:f5:6e:
b1:69:77:d9:36:38:ec:2f:75:62:16:4e:4e:78:be:b3:2c:9e:
b0:f9:a9:6b:60:a7:8f:df:d2:87:bf:02:90:cc:58:38:d3:7d:
86:5d:2a:43:36:5b:9e:98:7a:7a:d4:08:19:cd:17:07:c1:21:
e2:2b:3e:1f:99:45:64:11:aa:9a:92:b4:2d:f3:29:41:d5:34:
5d:d6:67:c4:27:a1:9d:f9:1a:cb:01:3f:66:f4:8e:ea:e4:69:
79:b3:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:01 2025 by rpki-client