Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa
File: 4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa (raw, json)
Hash identifier: iSoyhiEmfiYHb8jaQlOVwmL70xuhBc1hNAdtzfSrw3A=
Subject key identifier: 7C:B7:FE:E1:16:B3:E2:C6:EF:A3:6A:8F:7D:48:B8:7A:19:43:91:38
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858492F87C599FF563351FD77BC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa
Signing time: Fri 14 Mar 2025 13:30:23 +0000
ROA not before: Fri 14 Mar 2025 13:30:23 +0000
ROA not after: Thu 12 Jun 2025 13:30:23 +0000
asID: 41435
IP address blocks: 2001:470:427::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2f:87:c5:99:ff:56:33:51:fd:77:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 14 13:30:23 2025 GMT
Not After : Jun 12 13:30:23 2025 GMT
Subject: CN=e59188f7-a7d0-479b-9da0-d1a3c30201b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:d7:f1:55:85:f9:04:ed:85:9d:f1:01:4f:
80:51:8c:7f:b7:7f:c9:25:5d:2e:60:48:b4:55:04:
be:5f:b1:9f:c5:aa:1f:7c:59:ff:f1:50:2e:27:b8:
45:1f:ac:f9:3c:f3:f9:87:d6:ff:92:a2:30:c4:1d:
3f:13:57:3c:f9:b2:48:08:06:6e:ae:b0:77:85:7b:
3b:e9:5e:99:63:45:2d:1e:ea:ec:2c:fe:43:c5:3d:
fb:e4:9e:8c:cf:c0:cd:fe:96:a8:e9:f8:32:82:42:
6e:82:d0:db:72:12:f0:a3:28:01:d4:70:a0:30:84:
6b:6c:dd:64:89:92:9f:49:4a:88:19:4e:c2:54:6c:
2a:42:dc:78:26:59:a0:59:55:c0:a8:38:60:11:4c:
00:84:89:f0:8f:15:e4:44:1f:87:3b:88:c3:cd:3b:
61:82:08:9d:6c:b0:7e:f0:2c:0b:e5:c4:e5:33:48:
de:d0:14:96:bf:fd:95:57:f9:fb:81:c2:e0:63:47:
82:42:4b:68:ad:0c:d8:52:45:7b:3a:03:7e:a7:c6:
45:dd:31:1d:42:44:a4:42:b7:92:71:3e:6c:3d:2a:
a4:c1:ed:47:47:19:ee:f4:0d:4b:3c:a3:b3:9a:14:
51:7d:82:a8:01:a9:17:52:eb:4c:2d:b2:32:e6:64:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:FE:E1:16:B3:E2:C6:EF:A3:6A:8F:7D:48:B8:7A:19:43:91:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:427::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:7e:34:27:54:38:46:45:44:3b:91:f8:52:2f:06:ce:d5:c6:
59:a9:ec:ff:34:86:12:a7:70:70:9e:91:ee:fb:95:69:34:88:
c8:af:dd:98:d1:7f:2f:13:cc:5e:19:b6:cd:55:16:1a:fc:b4:
d6:99:79:65:b1:be:4c:ff:8b:00:22:84:20:53:62:b0:2b:01:
4a:f1:31:ff:65:5e:b3:c9:02:6e:fa:dd:ac:34:ea:03:92:b8:
7a:30:59:22:a4:9c:a8:e4:7f:55:99:25:d9:df:75:9c:ed:74:
c4:7f:39:56:7d:8c:53:ab:3a:a8:8b:69:b4:a4:c6:e0:58:c5:
af:c8:7e:81:e2:17:0e:86:dd:c9:14:ab:4a:05:0d:0d:47:0a:
ad:c1:ae:f8:cf:4a:5e:0a:92:be:d1:b4:7d:67:9b:9e:a4:76:
f8:4c:0f:a8:28:8e:3a:7c:30:02:22:c2:a3:ed:a3:d7:3f:e4:
33:25:9d:9d:05:2c:13:83:d8:f9:14:d3:0a:d1:88:cf:db:48:
cd:ba:f7:0c:29:5b:3a:1d:33:f8:cb:d1:cd:91:f4:f8:75:7a:
96:13:81:5b:91:04:5d:ab:b3:8d:75:db:a8:b3:8f:22:81:7d:
a8:c2:4b:8e:b9:5a:a9:20:cd:ab:1e:f3:39:55:6c:97:61:47:
c0:aa:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:13 2025 by rpki-client