Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d6360ed-5b00-3fb1-b488-d37c9238bbbd.roa
File: 3d6360ed-5b00-3fb1-b488-d37c9238bbbd.roa (raw, json)
Hash identifier: 4QqakUhXc8tu6f4IEbXS+6Jty3EfnlcLdN9GTtuxL14=
Subject key identifier: 21:61:3A:30:C9:1C:17:9B:18:28:E4:DC:36:2F:8C:6E:B8:F4:BA:17
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858494E2EBAAF11A4B159EEA51E10
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d6360ed-5b00-3fb1-b488-d37c9238bbbd.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 399861
IP address blocks: 2001:470:338::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:ba:af:11:a4:b1:59:ee:a5:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=6d6e830d-a073-4c3b-b33b-512da4174b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:5e:54:a5:7b:c1:6d:15:c8:58:fb:c8:d8:
60:87:cc:4b:0c:63:a4:30:54:4d:ae:30:3a:e1:b8:
41:93:fd:48:1c:b6:44:eb:3b:32:38:59:82:25:3f:
7d:75:b1:78:82:c8:9b:97:f2:63:2a:a6:f8:b5:36:
2a:ee:fb:71:33:24:24:47:40:8b:2b:c9:98:2b:8a:
e7:26:1f:b1:7a:a5:1a:54:8e:12:44:72:e5:9d:72:
15:d2:15:fe:dd:29:f6:3c:a5:4c:77:f6:58:d5:6f:
20:fb:21:4f:64:ce:56:44:15:fb:84:a6:8c:58:86:
b8:71:9d:46:bc:39:c2:bc:9b:48:ee:93:ef:6b:cd:
f8:c0:af:0d:14:e7:03:65:51:79:5e:9e:d1:b8:88:
46:98:fc:67:a8:f4:ce:71:74:f3:f0:90:af:1b:65:
d3:89:18:15:37:a9:21:8c:73:96:40:5d:d0:bb:b3:
9d:d7:9a:f7:a3:07:b6:e5:b6:85:a3:a2:fd:d6:1a:
af:6a:2a:4a:6a:94:a5:3f:ee:22:42:3f:4f:d2:7c:
46:d9:da:af:01:f9:68:04:3e:fc:66:c5:1e:6a:99:
e0:e0:be:6e:45:ee:93:4a:33:83:06:85:46:dc:a5:
b4:5e:4a:60:b1:05:b0:07:ec:eb:29:95:c8:56:18:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:3A:30:C9:1C:17:9B:18:28:E4:DC:36:2F:8C:6E:B8:F4:BA:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d6360ed-5b00-3fb1-b488-d37c9238bbbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:338::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:0b:87:19:b7:79:d1:7c:c9:bf:c5:e7:11:c4:cb:b7:63:57:
32:d2:45:e2:34:eb:d4:97:5a:a9:fa:de:2f:31:c2:d2:34:6d:
d5:97:cd:53:2d:11:5d:64:5b:0c:a8:b3:b6:f9:ce:a7:b4:1f:
fd:65:a5:6c:9b:ec:31:e3:79:aa:7f:1e:4c:c3:98:97:22:16:
7a:ec:03:e1:09:cd:af:16:ba:df:d1:e3:0a:a6:73:f3:f7:e8:
1e:4e:a3:cd:26:51:9b:d5:b2:80:5d:ca:41:98:24:1e:ff:67:
5e:b3:1d:d9:a2:8c:32:b4:d4:4d:c5:14:b0:bd:dd:8c:84:0a:
09:d6:a4:92:00:fc:3e:9b:60:0c:1a:bb:c2:ff:e3:a0:28:ac:
01:03:53:4d:0d:f5:80:29:1e:65:22:ec:24:8a:37:eb:9e:cd:
9a:83:f4:a9:b8:df:5b:08:52:7f:35:98:96:e5:49:40:42:b7:
d8:bd:50:ac:4b:df:54:95:10:a7:a7:9a:1d:18:50:3f:d9:60:
3e:27:03:9c:b7:2f:23:7b:22:28:81:9b:21:04:92:5f:06:c3:
54:04:a5:e1:b4:3c:91:38:61:aa:d6:7c:99:1f:0e:a2:55:a9:
ce:6f:4a:d7:d6:42:32:d0:34:e7:38:12:56:71:6c:ae:2a:fd:
6b:14:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:55 2025 by rpki-client