Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
File: 5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa (raw, json)
Hash identifier: g3jmvTp/i10d9B1gRyz3xz6bjzSn/EbNSP78kZ0pVk4=
Subject key identifier: 7B:5F:80:9D:DB:20:E5:ED:CE:88:64:2F:05:82:19:76:75:E8:E9:12
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E3AB8ACF9C2C99A35E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 45960
IP address blocks: 2001:470:243::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e3:ab:8a:cf:9c:2c:99:a3:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=19b8f482-3794-43ff-a1ca-a269d93392e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:4f:25:eb:71:a6:f6:62:cd:d7:06:06:ea:
ff:79:9b:f5:a3:ae:d3:b3:85:52:38:38:91:f0:ef:
cb:1a:79:78:8f:c6:18:ad:1f:45:bc:1d:54:bf:a5:
79:6f:d4:1f:d1:d9:2c:2d:50:81:7c:74:eb:d4:af:
3d:ca:6f:2c:39:c4:79:a4:3a:ca:9a:6d:61:f9:34:
67:e8:f4:6e:fa:a6:99:18:fb:e9:88:c6:1d:5f:e6:
f8:d6:cb:00:4d:94:f4:c8:56:e0:6b:a1:d2:7d:00:
6d:3b:a1:fa:77:5c:f2:38:5d:c6:33:8e:df:e1:e2:
fc:b9:0c:6b:40:45:9d:d4:23:33:c0:14:a6:f7:dd:
47:61:29:89:62:cd:55:fd:ea:6e:db:52:91:fc:20:
04:f1:b6:d3:d4:74:53:c2:cf:30:1c:79:47:ba:40:
31:7c:4c:fb:ea:cb:07:2c:10:8a:f6:da:e4:2f:f9:
8b:3f:c5:d0:45:e2:ed:70:f1:14:a0:44:d7:02:8b:
32:01:ad:bb:bf:be:47:88:4d:cd:08:7e:f0:bd:98:
42:36:7b:0f:b2:88:54:50:de:7d:65:e8:f3:da:78:
1a:81:9b:e3:5c:cf:da:28:a1:46:26:e4:9e:9f:f4:
a5:ab:5b:df:86:af:27:97:e6:1e:c9:ab:28:da:82:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5F:80:9D:DB:20:E5:ED:CE:88:64:2F:05:82:19:76:75:E8:E9:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:243::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:8a:df:f7:2c:00:fc:8a:c4:55:aa:81:87:6b:6d:5f:a9:58:
08:ff:75:fd:ba:51:df:6c:a3:eb:6c:ec:f7:16:92:18:59:27:
05:74:91:bd:47:13:83:ce:93:f2:36:b4:05:dc:e8:75:92:e3:
0f:b7:89:7a:b5:e5:53:db:84:e2:71:7f:61:21:c9:cf:6b:45:
f2:b4:84:7c:33:27:15:71:db:0a:a9:9c:40:37:43:01:57:1b:
a2:a4:7a:32:78:8c:d1:47:fb:86:43:6c:6f:46:e5:1e:41:39:
ac:f8:c3:4f:d0:20:9d:8c:6b:3b:b5:f8:4b:7b:80:b4:51:22:
a6:93:ed:94:c1:70:f7:89:81:10:6c:c0:0d:ed:05:fd:bf:86:
c9:f2:5c:5b:91:bd:82:3f:c4:84:e8:18:c4:f6:2a:93:a9:dd:
3c:c1:df:77:93:c9:b3:03:3f:0a:5e:27:cc:f7:5f:5c:06:43:
34:9c:66:74:ac:2d:16:44:9f:04:18:c7:4b:3a:be:08:0b:5b:
ab:b2:e2:09:09:73:17:ef:f1:f5:7a:ea:ca:73:1d:1f:ec:de:
a1:67:1f:ee:b4:59:b8:f6:27:8c:84:73:19:51:77:dd:f2:31:
c9:e5:15:bf:67:ba:1d:79:38:69:99:9f:23:3d:38:aa:40:d7:
1d:6e:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:20 2025 by rpki-client