Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51e0dec2-1ad0-3823-9d59-877282401270.roa
File: 51e0dec2-1ad0-3823-9d59-877282401270.roa (raw, json)
Hash identifier: JUCcluQddOJaypT1JrrVorjzasdJ29eIB54Suu+HpOk=
Subject key identifier: 64:72:90:C4:9C:09:74:08:2C:64:08:72:8E:89:0A:71:4E:97:1B:A6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858491AB54F3029CD49621BC5F580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51e0dec2-1ad0-3823-9d59-877282401270.roa
Signing time: Fri 07 Mar 2025 02:30:09 +0000
ROA not before: Fri 07 Mar 2025 02:30:09 +0000
ROA not after: Thu 05 Jun 2025 01:30:09 +0000
asID: 264409
IP address blocks: 2001:470:15a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:b5:4f:30:29:cd:49:62:1b:c5:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 7 02:30:09 2025 GMT
Not After : Jun 5 01:30:09 2025 GMT
Subject: CN=48ed5f5c-6005-428e-a3b4-3c287362dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:23:ec:de:29:9d:53:eb:56:c5:17:1c:46:
b8:bd:c8:29:68:67:17:2d:dd:f9:78:b0:77:b1:ef:
7c:ec:57:6d:0b:fc:3f:22:ad:af:ff:67:c9:d1:14:
fd:d8:65:5e:68:04:f8:8c:de:d6:d5:ec:df:26:7c:
dc:34:ff:ea:26:ab:12:8d:92:ed:f5:5a:26:af:45:
0a:0f:66:27:17:b8:48:2f:b7:04:43:d4:35:98:6a:
0d:18:f8:d9:40:e3:a5:40:1e:07:65:07:29:5a:7e:
63:3e:27:7f:d0:e3:65:1d:b4:55:45:99:52:09:2f:
25:e2:74:02:48:a4:e1:b8:3d:76:1c:b2:f5:9b:9f:
10:7d:a4:84:f1:b6:ee:4d:9f:c9:c8:54:dc:7d:85:
92:17:47:93:df:93:55:93:30:77:5d:c7:6f:73:d8:
e8:b9:ed:38:17:b9:1c:27:ff:8f:44:1c:3e:d9:38:
d8:aa:ef:23:d0:b5:f6:6f:26:9c:08:6d:c5:ea:4b:
bc:7b:a1:e4:4d:b6:77:6d:e2:0d:41:c5:e0:94:e1:
06:20:73:8f:80:5c:ca:4b:89:7b:12:a0:39:9b:10:
a1:0e:2a:52:40:e4:41:bf:39:dc:cb:f4:af:17:a9:
5a:1c:4e:fa:3b:eb:b7:43:ba:5a:03:e8:f6:89:c8:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:90:C4:9C:09:74:08:2C:64:08:72:8E:89:0A:71:4E:97:1B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51e0dec2-1ad0-3823-9d59-877282401270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:15a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:f3:41:5c:5a:f2:db:29:8c:6a:fb:87:9c:75:0e:2f:6a:c1:
ab:a7:fa:76:ac:24:9d:12:10:da:bb:53:43:0e:8a:ad:94:8c:
8f:4c:26:d1:47:cc:bf:7f:a5:69:0c:86:11:18:f8:99:a7:3f:
50:64:3e:e8:94:67:ee:89:11:03:16:47:17:cc:96:a5:3d:41:
82:d9:9c:bb:09:e3:13:10:9a:1b:4c:b5:ca:8f:65:1a:11:7a:
2f:b1:12:e2:5d:79:7a:4a:4f:0d:a1:8b:36:d8:ba:a0:9c:02:
98:ed:d0:63:fe:2f:32:d3:e7:f1:b5:93:b9:bc:e9:22:5c:7b:
c6:3e:bf:10:45:4c:84:c4:d3:dd:5a:e3:6e:03:af:e0:aa:1b:
bb:52:f2:03:82:28:61:fa:73:d9:e9:3b:da:24:dc:12:e5:c2:
02:99:b7:56:6b:02:c4:19:93:53:b0:27:d6:69:6f:f1:28:62:
49:2e:0a:d3:49:6d:a6:07:1d:66:e6:15:30:16:e3:25:d3:9f:
02:14:b4:1f:f5:38:ca:b1:6a:35:a1:61:9e:8d:07:65:a0:d1:
d0:54:e8:e6:db:2c:64:49:91:8e:bd:af:11:cb:ba:d8:c5:4c:
32:ca:ca:3a:72:c5:43:9d:91:9f:fb:bd:15:db:bc:75:8b:f5:
cb:3e:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:58:34 2025 by rpki-client