Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/303027a5-09c5-38d1-949f-9947601e530f.roa
File: 303027a5-09c5-38d1-949f-9947601e530f.roa (raw, json)
Hash identifier: xLIeYlFCK4/73nM9NuAVdFTA3VUCRQmeVKmmcxPEsGI=
Subject key identifier: B9:D1:DE:AA:75:6B:8B:CA:28:69:F2:D7:14:B9:B2:24:24:96:63:9D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848C41B77EA676E49C655A222B0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/303027a5-09c5-38d1-949f-9947601e530f.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 131274
IP address blocks: 2001:470:3ca::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:77:ea:67:6e:49:c6:55:a2:22:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=8dd39d3f-1f6e-4475-b76e-ad8618b54031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:65:b1:80:45:0f:ae:8d:e9:46:39:9c:eb:
9d:df:df:eb:c4:bc:ba:c5:e3:54:43:f8:33:99:77:
bf:99:df:8f:36:d1:2b:db:4b:8b:03:49:8a:26:4b:
d1:ef:74:85:34:86:78:6d:45:d4:6a:79:f5:3d:33:
7a:ea:94:8f:27:10:9b:ac:08:f8:77:df:97:83:5a:
1d:a5:c3:c4:86:da:36:f1:4f:7d:6b:2e:d5:f7:01:
ba:5a:8a:94:b8:4b:90:5e:76:aa:ab:d5:68:08:c3:
7c:3c:d4:b8:c7:30:50:40:d4:57:6e:09:c8:62:ab:
2c:3c:e1:47:89:27:fe:48:10:9a:e6:33:38:45:ea:
45:29:db:41:5f:f4:e4:7c:ca:3f:40:ca:e2:9f:0e:
1d:a7:73:5e:35:34:20:58:70:70:70:4d:04:90:eb:
46:f1:9b:98:11:2e:d0:78:1e:ee:d3:c0:02:70:5f:
08:7a:d0:fd:ac:9c:cc:44:5b:b4:89:77:af:8c:fc:
24:53:e1:57:ca:9e:53:e7:55:33:19:34:e0:16:53:
ea:cf:36:25:aa:60:27:85:d3:ba:c3:20:1c:a6:5e:
6b:92:d2:f1:2b:c1:8f:df:48:8c:2e:92:46:40:17:
65:88:9c:47:f7:94:3e:33:2f:b4:de:cb:17:32:7f:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D1:DE:AA:75:6B:8B:CA:28:69:F2:D7:14:B9:B2:24:24:96:63:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/303027a5-09c5-38d1-949f-9947601e530f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3ca::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:48:2a:13:15:5d:ad:e5:2d:0a:5a:20:4e:02:8d:9d:16:ba:
e7:88:e3:75:e0:7a:ea:f7:a0:0a:6f:d5:18:90:6d:f0:05:59:
25:85:02:53:e8:81:f0:fc:9f:1e:88:03:24:a2:77:a8:a8:02:
60:e5:0c:fb:43:ef:eb:57:d9:71:45:45:8b:d6:67:67:72:b6:
25:59:74:fe:4a:68:c0:1c:fe:11:09:38:42:db:8a:6f:75:b8:
81:8e:80:23:75:f3:ea:9e:1b:e2:01:c3:fd:72:75:07:26:cd:
89:c9:8f:ec:49:c4:27:dc:e4:b1:68:65:62:8c:d9:d8:a6:32:
19:9c:88:b5:2d:d4:6d:34:96:2c:bf:85:57:b0:5c:a5:85:ef:
60:12:3b:b8:04:3a:59:d2:08:0c:6b:c9:d9:14:4f:e1:2f:db:
b9:ea:09:24:91:5a:a8:16:09:dc:54:f1:cb:70:ce:00:dc:00:
92:34:39:2b:1d:eb:60:15:d5:c7:08:23:f9:8c:4a:66:bf:07:
2d:38:b7:62:2c:0e:8d:5c:c8:fb:59:57:0a:1d:3e:29:eb:b5:
6c:5a:26:27:df:ef:83:bc:03:5d:5b:a2:90:53:f0:63:eb:06:
1c:92:d9:08:e9:15:0b:f4:93:c6:7b:77:68:d0:96:16:67:15:
36:43:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:46 2025 by rpki-client