Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/442db7cb-cbab-373c-a22f-8dd6db1ade71.roa
File: 442db7cb-cbab-373c-a22f-8dd6db1ade71.roa (raw, json)
Hash identifier: X7gnFY8SmVB9XEgVAE7R0tedO7x9fmQIF4OW6cZbfS0=
Subject key identifier: 66:C0:0D:C9:61:FC:B2:16:05:D0:A3:10:04:0D:EE:E8:3D:92:75:05
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858495802A04558ECA21421FD4F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/442db7cb-cbab-373c-a22f-8dd6db1ade71.roa
Signing time: Sat 29 Mar 2025 01:30:15 +0000
ROA not before: Sat 29 Mar 2025 01:30:15 +0000
ROA not after: Fri 27 Jun 2025 01:30:15 +0000
asID: 22690
IP address blocks: 2001:470:422::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:58:02:a0:45:58:ec:a2:14:21:fd:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 29 01:30:15 2025 GMT
Not After : Jun 27 01:30:15 2025 GMT
Subject: CN=3c366999-26c3-48dc-818d-c80a4a30dbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:17:2f:07:87:e0:53:97:79:8c:be:08:df:
6d:bc:d1:62:46:91:90:f3:1b:ed:85:ba:ad:7d:94:
02:1d:4c:fd:38:70:43:03:88:c1:e1:ea:25:00:30:
55:87:8f:81:5e:00:e5:01:94:30:d6:cb:f4:f1:bd:
12:22:7c:52:c2:85:7a:9c:6e:eb:d3:b8:91:59:7b:
a0:10:80:30:d8:a3:9e:e6:be:a1:95:05:03:9c:97:
62:4a:db:e9:7b:c9:4b:7b:ec:89:dc:e2:9d:70:cd:
c4:0c:70:ca:fc:2b:15:13:1e:78:70:15:ed:5e:81:
5b:2c:05:9a:12:44:40:75:da:b7:99:d5:f8:69:30:
dc:29:4b:9d:47:0e:82:d0:16:5e:bb:d6:67:69:7a:
d4:80:a8:d8:45:26:03:67:62:88:43:d9:a9:55:2a:
b9:16:6c:5b:74:29:55:e7:e5:2f:b7:4b:ec:40:12:
52:f3:da:83:2e:55:7e:c2:4a:7b:6a:a9:d1:fe:a2:
06:c1:24:35:1c:e8:64:5f:4a:3d:ab:9d:b2:84:c9:
73:8a:42:04:d0:df:22:46:28:6f:5f:c6:b4:03:0f:
5e:c3:1c:0b:94:de:f6:e8:ae:ae:45:59:29:05:f0:
21:c0:25:f6:13:12:4d:c1:b3:7a:6f:35:f2:3b:26:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C0:0D:C9:61:FC:B2:16:05:D0:A3:10:04:0D:EE:E8:3D:92:75:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/442db7cb-cbab-373c-a22f-8dd6db1ade71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:422::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:c3:7e:ed:a9:57:92:ee:59:53:96:28:dc:10:00:16:3f:54:
9f:1e:ce:6f:f8:f4:3a:03:21:ed:f9:c6:1a:14:6a:66:cf:6e:
bf:de:07:4b:87:27:ed:77:6f:71:5f:14:76:39:e9:3c:d5:c1:
3f:39:f7:2e:8f:95:fb:b5:cf:ea:06:9f:a6:e6:01:22:b2:79:
1f:75:30:db:15:12:a5:3b:dd:c5:d7:34:ed:45:09:72:60:24:
c3:1a:57:c5:e5:15:7b:63:80:dd:9e:38:25:3c:8d:a4:a8:20:
43:23:10:89:7f:05:77:ab:84:a9:72:5e:0e:c0:74:9e:84:33:
8f:51:eb:9e:97:7f:ea:e7:9f:dd:23:43:73:ca:b2:95:d5:4a:
3d:1a:57:a7:58:56:10:a8:95:b5:bb:03:69:6b:d8:ce:c3:e1:
3d:f4:1d:b2:20:03:b6:a6:37:6a:18:29:14:24:96:db:f5:32:
db:7a:92:df:12:ab:20:3d:c6:16:5c:8b:9e:fb:51:63:65:d7:
4c:4d:a0:f6:38:43:f3:f8:96:5b:aa:d7:ba:7a:10:ee:48:03:
fc:8b:7b:6c:f4:de:ef:da:e1:aa:9b:35:fc:7e:26:2a:4b:7e:
ad:7b:b0:70:89:a9:a9:14:8b:ff:b7:ab:f5:6c:fa:25:e3:8e:
2e:9f:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:14 2025 by rpki-client