Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
File: 2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa (raw, json)
Hash identifier: 2P02sloTytJHa/h7yYbu+XCDr6JXFUTthtyuIPLw0Y0=
Subject key identifier: C3:DF:E5:3A:90:37:3D:C3:95:D9:D7:CA:36:F2:45:89:0F:A8:99:D3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E503C001BC7D8CA38C60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 43525
IP address blocks: 2001:470:2a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e5:03:c0:01:bc:7d:8c:a3:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=8327f022-5ce5-4cd9-a2eb-11181ef17210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:1d:0c:3a:a9:8a:af:99:bf:d9:11:a5:52:
26:b3:df:90:ab:47:ec:ec:fa:54:fd:31:25:e9:54:
a7:03:49:c9:17:bb:eb:05:01:dc:75:15:bd:25:6f:
d2:68:95:3b:e3:9a:83:1a:db:27:57:4d:eb:02:98:
b0:29:45:11:38:d1:a4:2f:a9:66:89:4f:5f:48:62:
61:e8:ab:36:62:0d:bf:e2:b1:2d:1d:09:52:75:3d:
d8:29:b7:10:5b:b1:27:6e:96:25:01:ea:fe:07:0b:
dc:87:9d:2d:b7:b4:c1:0f:3c:20:ba:4d:43:e5:54:
f6:57:9c:ab:db:fc:f2:33:8a:ff:55:9c:bd:9d:51:
17:ff:dc:85:8d:9d:e5:b1:74:81:b7:e7:96:bc:e3:
cf:e5:d0:8e:40:9c:80:99:5e:88:b0:95:a6:52:b1:
d8:19:0c:9b:13:58:3a:35:8a:5b:06:63:bd:dd:35:
14:eb:6a:ce:e1:0e:40:16:9d:05:12:0d:3c:55:58:
ee:fc:c2:07:be:62:4b:48:46:56:51:c5:9e:5a:e2:
a9:78:b9:2e:f7:52:ce:43:9a:83:5d:80:84:f7:f5:
2a:24:93:d2:3d:70:ab:4c:cb:55:4a:e0:31:b0:af:
ed:e9:53:c7:18:d4:2c:96:a0:10:1d:73:07:fe:9c:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:E5:3A:90:37:3D:C3:95:D9:D7:CA:36:F2:45:89:0F:A8:99:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:40:15:5e:04:5f:80:3f:92:36:64:bf:e9:fb:d1:d9:32:66:
18:f2:39:7d:37:97:2f:b7:60:b1:94:a4:90:f5:f3:e7:d1:71:
c9:28:77:a1:34:87:d8:00:a4:46:6e:1e:12:2a:85:fd:bd:60:
00:fd:2b:4c:2a:1b:c2:c0:52:60:0d:24:8b:80:dc:34:fa:52:
90:49:ad:55:9d:39:e1:0f:2c:52:bc:3e:ee:34:39:75:02:58:
f3:2c:a4:3d:e8:6e:69:fc:77:f3:4a:2f:8e:ee:e6:25:a9:83:
20:80:70:00:b5:c9:49:c3:ae:14:6e:b7:1c:ab:50:e5:c3:f5:
f2:72:21:9f:c1:99:e9:8a:d3:0f:46:66:10:9e:c8:03:9e:53:
a7:ff:aa:7b:d0:1b:2d:0e:f2:a5:85:65:ac:73:35:fd:c4:38:
09:82:c4:67:91:9a:14:aa:91:ef:96:16:1f:04:f4:0a:89:12:
a6:2f:98:62:ad:db:8c:1d:cd:ed:36:31:bc:ec:40:0d:cf:25:
21:2c:3d:f9:0f:3a:d5:de:b6:fa:7f:cb:c1:63:ac:ec:3e:f2:
15:ac:c1:65:8a:d6:1b:ec:ba:e2:1c:64:e5:53:26:93:cc:e4:
1c:88:95:58:17:ba:aa:4e:9e:7a:25:a4:20:45:06:b3:e0:b6:
60:37:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:52 2025 by rpki-client