Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55465e27-fd12-3f51-85d2-5efff2be8281.roa
File: 55465e27-fd12-3f51-85d2-5efff2be8281.roa (raw, json)
Hash identifier: jaGt4LgC8zPxz050vnu5EjsRtre1272axJtrB8YdYOY=
Subject key identifier: A1:02:FF:26:98:D0:DB:AE:E2:E6:2A:4B:0E:E8:01:10:AD:3D:4B:83
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C9D441E63BDCAC6AACA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55465e27-fd12-3f51-85d2-5efff2be8281.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 58411
IP address blocks: 2001:470:25b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c9:d4:41:e6:3b:dc:ac:6a:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=b67845fa-7c8c-4269-bc40-25c0d3704294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:88:d3:a0:73:ef:d0:17:df:88:fb:3f:0c:
bd:38:42:89:47:5a:0d:b2:12:15:a1:87:16:a3:65:
7e:c0:b2:b0:24:33:a2:19:bf:8e:1d:6e:29:93:68:
df:fb:16:90:f2:7f:a3:c6:8e:2e:5e:ef:ea:b3:6b:
46:b0:bf:b9:e1:39:3d:5a:c0:fe:35:db:28:50:93:
02:64:68:f6:b9:70:c4:95:f7:c6:f4:83:7f:19:c8:
50:33:a5:9c:14:0b:ed:0a:bc:e5:9e:59:db:7c:12:
70:a9:5d:49:02:08:57:31:77:7e:da:b4:b5:e8:cc:
a7:cc:b0:71:a1:92:2e:51:88:95:1b:1b:ae:13:17:
a2:6c:39:03:27:4d:42:ff:c2:28:71:86:c8:86:2f:
e2:c1:c3:aa:5e:c2:29:2f:b0:2b:fe:33:8b:b0:96:
80:17:b9:44:bf:2a:97:80:e5:85:6a:7b:94:1a:2b:
50:08:3b:4c:2f:7c:a8:2f:ef:2f:5a:c7:f7:fb:3c:
38:3a:b2:e6:bb:ee:6c:30:4c:7e:78:d4:7a:7b:f9:
8a:f0:11:af:e4:98:5b:d0:dc:61:23:07:6e:83:26:
80:6d:7a:09:6c:86:8f:88:1d:f3:7b:33:8b:5a:80:
a3:00:25:5b:34:85:2d:9f:a1:3a:4c:38:ee:3c:88:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:FF:26:98:D0:DB:AE:E2:E6:2A:4B:0E:E8:01:10:AD:3D:4B:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55465e27-fd12-3f51-85d2-5efff2be8281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:25b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:17:89:2f:87:ac:4f:11:42:f1:cf:69:bf:2e:3e:27:2c:79:
1f:d4:df:6f:fc:26:cc:36:43:29:57:bf:e2:41:0f:f9:05:a1:
a2:62:e0:97:93:03:5d:fd:2e:ab:7f:8b:91:dd:11:62:2e:e2:
35:6e:d5:a0:61:9d:fb:8f:a2:e8:6e:16:c0:e0:2b:aa:cb:d6:
ba:71:83:de:c8:00:82:12:2a:39:e2:ef:b9:b1:1a:59:4a:db:
30:b7:f2:d8:be:8a:28:fe:73:ec:65:f9:a9:25:a1:17:64:6a:
f6:93:ef:ab:ae:1e:89:b5:82:11:96:dc:87:90:1f:44:70:64:
61:bd:61:a8:f6:2d:7c:4b:bc:2e:0e:48:a3:78:3d:9b:2e:c8:
ee:82:5a:2c:ff:a0:07:97:65:6e:61:55:97:5c:00:d1:ca:07:
f0:cc:be:57:5f:95:02:3d:b1:37:6d:68:b1:35:31:cb:fa:9d:
33:3c:9f:88:e8:da:1d:0c:b9:d5:84:0d:49:81:50:11:0a:a1:
e4:f7:49:7f:07:6a:91:1c:bc:34:b1:ac:f5:3a:13:80:6b:80:
eb:d6:41:d8:66:ee:52:9a:8b:f4:fc:62:f7:0d:a5:10:5b:4a:
6c:8d:fe:76:60:6e:58:0d:4d:5e:15:db:83:d1:fd:f7:e9:31:
ba:86:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:25 2025 by rpki-client