Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c832ea9-477b-3b2c-9269-c40ea6c82506.roa
File: 4c832ea9-477b-3b2c-9269-c40ea6c82506.roa (raw, json)
Hash identifier: M/lZs+hpbEo66xUiICWY3Zyh2U+pNkzWFqGe1pX/ahs=
Subject key identifier: 74:2A:AB:D9:C1:BB:E8:1D:ED:96:84:B2:E4:55:90:91:B4:6C:9B:08
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C83AF87CB82DE581C180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c832ea9-477b-3b2c-9269-c40ea6c82506.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 11597
IP address blocks: 2001:470:20b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c8:3a:f8:7c:b8:2d:e5:81:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=c6144d02-5499-4dba-b60e-da7a30f9e940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:ac:6b:69:56:0d:a2:ba:23:e0:03:e3:b1:
28:2e:18:96:66:2f:a4:05:0c:40:e6:9b:11:fb:ee:
06:6e:58:ff:98:9a:0d:ae:2e:17:4f:12:95:90:ae:
b3:16:60:26:e2:9c:ae:8c:b1:a9:ec:16:b9:8f:6a:
e8:a2:a5:51:88:34:e2:b9:e1:93:5b:66:6a:b5:3a:
cc:bd:ae:a3:2e:48:7c:db:d0:24:cf:12:d4:e7:df:
1d:bb:53:3b:5f:c3:8d:77:44:da:db:fa:4d:b0:cb:
ba:e1:10:a4:9f:57:3a:2f:a2:c6:2d:02:20:3c:e2:
2b:ff:f7:e6:f8:b3:1a:3e:73:ce:7f:c0:b1:ac:7c:
73:bd:b4:37:49:2d:5d:84:19:94:d6:e9:ba:da:f6:
a1:57:40:9c:c8:a8:dd:78:83:41:25:ac:8b:88:d3:
97:b7:25:3f:0d:d9:c7:5e:06:00:54:2b:5f:2a:b0:
ca:dd:31:7a:7c:fd:d7:ee:f8:1d:f9:76:5a:fa:1f:
4f:a2:59:06:66:15:e6:10:a5:52:84:80:75:04:41:
22:fb:0e:bc:a6:28:52:3a:2d:1f:80:00:9a:d0:35:
39:12:35:08:f7:01:43:ca:33:55:5c:ba:e2:10:c2:
71:d1:34:d3:4b:8e:4e:16:d1:5f:69:26:6e:6b:20:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2A:AB:D9:C1:BB:E8:1D:ED:96:84:B2:E4:55:90:91:B4:6C:9B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c832ea9-477b-3b2c-9269-c40ea6c82506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:20b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:84:4e:45:eb:79:5b:fc:32:89:57:2a:0c:02:60:53:4f:2e:
a7:5c:d8:db:d2:50:a7:f4:b9:a4:e2:15:e8:3c:92:ba:f7:d6:
7b:1b:ca:b0:db:a1:d9:5d:b9:af:47:1e:77:60:5f:32:af:1c:
8b:38:02:36:ef:f4:4c:27:96:5b:49:65:57:f7:8f:a1:cc:48:
af:18:4a:a0:9a:70:19:0b:a5:11:b0:5f:d8:e9:9c:28:3b:5e:
37:8b:90:46:02:23:59:d8:3b:ae:f1:2a:35:e0:a4:00:e0:7f:
5a:8a:bd:aa:b2:68:b8:6e:bb:8c:86:81:41:bf:4d:9f:a9:35:
5d:5c:a6:73:6d:75:2e:fb:80:91:1b:57:10:90:55:2d:c8:23:
f0:eb:65:f7:23:da:01:de:03:e0:22:7b:21:c9:05:1c:fc:dc:
4c:b9:02:ee:ed:a4:9f:65:c0:50:1e:9f:45:a6:66:33:44:fb:
1a:32:6c:4a:b7:2f:e2:1d:c1:3a:96:7f:0a:80:92:73:64:12:
5e:f2:82:b0:68:32:53:62:c4:a4:19:88:aa:5b:d9:28:19:d4:
18:6d:aa:cf:99:33:0c:d1:e9:c5:00:c3:15:96:84:27:76:07:
49:1e:ca:15:0b:b6:98:22:be:00:52:ee:d6:e2:07:34:1e:70:
23:f0:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:11 2025 by rpki-client