Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26b343c8-04b4-3d43-a7c6-e808491f83c4.roa
File: 26b343c8-04b4-3d43-a7c6-e808491f83c4.roa (raw, json)
Hash identifier: Q8fWeKrObwqttIA0QQ6J7qHgfV2x+tAAU+mIVzQn3Hk=
Subject key identifier: 12:31:6F:BE:85:A0:81:70:6D:56:EF:31:4F:48:A0:7E:6C:AD:F1:DD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D01B109ED641E28CAF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26b343c8-04b4-3d43-a7c6-e808491f83c4.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 51276
IP address blocks: 2001:470:2da::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d0:1b:10:9e:d6:41:e2:8c:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=052b56ea-97b4-4ec9-bc7d-6fb202ded7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:ab:80:53:26:ca:31:16:34:e2:8a:5f:48:
9e:95:c7:57:72:aa:07:ff:ee:7c:36:de:0d:c5:c3:
61:d8:4c:bb:ce:69:3b:95:c0:5b:17:09:3c:bc:c9:
38:a6:e4:c9:cd:d2:eb:e3:2b:ad:6a:52:b8:04:55:
e9:74:35:a3:f3:7b:d4:1b:40:87:78:69:55:96:86:
1b:39:4b:d7:51:6c:f0:99:2f:48:72:ab:cb:c8:17:
9a:56:7b:4e:37:97:36:47:57:05:61:fa:1d:b1:3e:
ba:7e:0a:56:b2:ea:af:11:0c:f9:58:01:8c:98:77:
88:80:dd:e7:53:a1:77:14:70:25:0f:69:53:ff:c2:
39:38:0d:b4:39:68:0b:85:f9:12:78:f7:80:9d:01:
a2:5d:57:b7:85:ad:0c:2b:a6:7e:a9:98:6c:09:51:
12:63:85:89:e8:90:6e:e5:59:0f:73:df:48:ab:43:
ef:bd:9f:2c:a7:12:b4:79:fd:1a:d5:0e:c8:ed:01:
a8:e0:2e:d7:8f:6d:f1:6d:6d:6a:bf:bf:90:d6:15:
a7:9d:1e:22:2b:51:ba:dc:dc:2c:78:43:92:1f:55:
27:17:f3:c8:08:52:b2:1b:a0:89:de:73:78:9e:b5:
21:48:74:02:c9:dd:4c:16:e2:ce:ae:64:f6:2f:1c:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:6F:BE:85:A0:81:70:6D:56:EF:31:4F:48:A0:7E:6C:AD:F1:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26b343c8-04b4-3d43-a7c6-e808491f83c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2da::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:b0:e8:c9:54:6e:b4:b4:ef:60:85:48:7f:78:1f:a0:91:2b:
a4:e0:98:7e:0d:48:e9:e3:00:5d:98:98:46:9f:b1:6d:2a:60:
7e:65:c1:7d:37:7d:26:fb:6e:c3:20:18:c3:a5:45:4b:fc:3a:
c9:d6:2b:db:d4:e4:76:a0:71:1d:43:d4:25:07:b1:99:99:5a:
c5:c4:bd:f6:e4:93:eb:21:8a:5b:f8:2d:1f:2d:9d:19:8b:bb:
9b:6b:96:92:43:38:41:10:b8:02:dc:ea:26:f6:03:7a:9d:98:
3b:c7:d9:e6:42:0a:a7:e1:4b:f8:61:3e:e0:72:52:43:8b:87:
53:78:06:04:0a:c7:20:62:0a:c5:b8:bf:43:f4:6f:52:5d:78:
9c:1e:6d:08:45:c7:9f:b2:32:fb:b9:13:8e:69:49:eb:97:48:
4f:59:90:c8:0f:90:c2:0a:78:b1:59:5f:e0:b0:f0:f6:d7:85:
58:bf:ef:ea:9d:08:11:dd:97:d3:ce:48:72:3a:49:80:0f:c5:
c1:ce:d7:13:3f:70:38:3e:2b:c2:26:5b:b6:63:8b:cb:ec:4f:
b7:ce:1c:00:d9:df:d5:42:9f:3f:8f:76:71:f0:69:e2:e9:ed:
39:79:3f:ab:b7:8e:48:67:34:4e:33:35:49:93:c0:b6:d6:12:
73:bf:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:09 2025 by rpki-client