Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa
File: 2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa (raw, json)
Hash identifier: iYL/kqMYbZ80onWxSaNPOgOXJEIxLsrC9Vp9HzRBG/w=
Subject key identifier: 95:65:18:BE:A3:25:ED:13:A4:4F:09:54:08:7C:BF:C0:6B:0B:F5:74
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BC27E714634342897C70
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 53813
IP address blocks: 2001:470:8e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:bc:27:e7:14:63:43:42:89:7c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=1dc6caf8-0090-4fb4-9fa7-dbd800909821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:f9:fd:f8:e3:81:52:4a:5d:2c:18:bf:ac:
b5:c4:d4:e0:3d:58:6f:f2:31:99:63:6b:03:4c:85:
ea:f3:83:41:b0:8f:b2:1a:f3:53:a0:50:73:b6:67:
fe:cc:f9:a4:00:7d:9a:df:1e:99:9b:09:df:2b:69:
9b:4b:a9:3b:64:0c:bf:cf:67:b8:6a:8a:3c:6d:3c:
8b:f3:3f:09:07:9a:b9:11:44:a6:2c:2a:09:87:2a:
2b:70:92:f4:97:2e:bb:5d:4e:e2:2c:81:8e:2c:24:
99:a3:31:67:9c:38:ad:a2:55:bd:63:31:02:10:c3:
d5:40:39:fe:4a:e4:f4:3b:68:01:6c:9a:9f:25:62:
9b:a8:5a:65:a1:1b:f7:63:f4:45:69:68:35:7b:e9:
ca:d2:e8:d2:38:4e:bd:8a:64:42:4b:31:68:f7:97:
4b:86:4d:9b:f7:7e:73:42:e6:37:d5:15:62:04:69:
b9:a0:8e:56:a3:30:48:84:d7:89:2b:51:ef:83:0d:
d0:73:9d:86:44:1c:ce:66:71:6f:c9:00:dc:9f:87:
c4:ee:f2:94:5c:6d:c5:e3:fc:47:c1:b2:51:92:d2:
f1:07:3d:60:6c:cb:34:87:df:b2:d2:d0:c7:5e:d9:
8d:42:e5:6d:8c:e3:25:f0:f4:f3:5d:da:0e:cf:69:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:18:BE:A3:25:ED:13:A4:4F:09:54:08:7C:BF:C0:6B:0B:F5:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:8e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:5d:70:e7:c8:89:be:8c:33:89:41:d0:93:75:5e:6c:7f:f9:
ef:ba:41:b7:7d:aa:49:36:61:e0:7b:a9:04:83:92:1f:76:6f:
24:2d:81:c1:3a:49:f3:76:2d:78:30:80:a2:be:8e:ce:cb:bb:
c6:0c:5f:e6:a4:9f:ba:ab:e0:95:eb:09:67:75:a5:d9:14:ec:
c4:20:4b:c0:01:2c:e9:90:bd:ae:a0:51:b3:f1:44:85:5e:cb:
7c:ea:ad:ff:b2:64:6f:45:dc:5a:b5:29:0a:57:a7:84:39:2c:
17:07:05:6e:29:51:ec:dd:1a:5d:9f:30:54:a1:07:d1:59:7a:
40:ed:7c:31:69:fc:cf:6b:cf:54:74:27:b0:8d:92:d2:84:f4:
9e:0c:04:4c:e2:16:17:a1:9e:64:08:2c:97:10:c5:65:7d:f2:
b9:0f:34:00:39:7e:f4:da:50:14:7f:5d:5f:e4:99:51:5f:02:
b7:16:e8:83:c4:96:44:eb:1e:79:82:a9:88:27:a9:1b:00:82:
11:d4:89:25:76:ee:25:e6:f5:99:94:1d:4f:aa:78:11:cc:2d:
f2:46:00:09:ef:28:7a:60:2e:c8:b6:8a:ce:98:76:38:ce:73:
dc:63:39:52:86:3b:fd:a1:47:3c:70:4c:c1:28:12:bc:06:38:
fc:44:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:59 2025 by rpki-client