Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa
File: 5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa (raw, json)
Hash identifier: 814c/dxxO7Q/BzrmKOmhS3nRKv+CSUHMlIoFgCt3yrE=
Subject key identifier: B7:E8:7F:DF:CB:E3:F7:8F:EB:E9:EE:13:92:E4:DF:89:66:15:FB:FF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C896118D4D84BF71A180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 206186
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c8:96:11:8d:4d:84:bf:71:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=847cf519-5e50-44b9-9599-6db58c73c3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:19:f1:55:1b:51:4b:d9:35:02:1d:39:77:
94:dd:7f:d1:9c:6d:42:d3:51:ae:f7:21:b4:0b:b6:
5e:fe:fd:f8:78:38:a5:f1:84:12:a2:a9:1b:62:f9:
0f:c9:27:ca:fa:9f:b6:60:54:e0:ce:64:da:1f:63:
f6:d8:05:5a:ac:7f:3b:6d:62:a3:c4:05:be:33:3c:
2e:44:f2:a4:a1:90:32:8b:d0:18:0e:0f:ef:a8:67:
2e:3a:db:1c:a5:2c:e3:26:ba:b1:ac:e0:76:89:a2:
b2:fd:a3:68:0e:18:d2:04:ed:c3:f9:7e:9e:dd:a1:
37:ea:34:4e:98:64:0b:07:d0:f7:87:2f:c2:46:e9:
4e:c6:3d:29:82:f9:dc:06:fc:fc:e7:1d:24:1b:6a:
c0:c4:81:43:dd:44:cc:9f:25:ad:6b:aa:bd:1e:cb:
ee:df:17:9a:a8:51:19:9d:1c:94:9e:03:40:f9:e5:
9c:ba:c3:27:41:d8:4d:a0:a5:ef:70:cc:3f:aa:c0:
06:82:5b:f9:5a:0f:a7:1b:3d:7b:5c:4e:73:7c:2b:
a0:36:6d:58:1f:45:85:e9:75:68:78:5f:17:01:1b:
46:ae:41:0a:c6:7e:f9:92:9d:ef:54:0b:23:f0:76:
a6:9d:54:83:61:88:a3:90:7e:e5:d7:bf:ad:e9:e0:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:7F:DF:CB:E3:F7:8F:EB:E9:EE:13:92:E4:DF:89:66:15:FB:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:71:55:2a:d4:33:31:89:bd:d3:20:3f:6e:e7:f6:5f:44:e0:
c3:ca:86:ac:ac:54:a1:2c:e6:1a:51:72:7b:2a:ac:58:cb:b5:
ef:cb:c0:1f:ee:0f:2b:1b:66:6b:db:e0:28:83:4e:db:3d:03:
bf:f1:63:fb:07:da:a3:ea:58:9f:e7:c9:ff:84:fe:3e:0d:5e:
58:5c:d5:2e:a7:32:26:dc:93:3d:cf:86:ff:30:6a:3e:a1:01:
ee:6c:23:ab:14:7b:bc:49:46:f9:84:11:55:3f:84:e7:0a:47:
12:42:6b:2a:d1:5f:87:e7:f3:db:20:cf:48:c1:3f:15:15:b5:
6d:2b:e0:76:29:e9:04:ef:e1:4f:42:08:0c:7a:76:e5:50:24:
ce:17:cb:1d:69:b4:41:d9:ea:b4:92:82:39:05:95:f6:b3:30:
ee:62:2f:f0:b6:5a:39:f1:c0:31:99:8f:62:69:6f:16:5a:a8:
2f:72:04:f2:2c:40:16:76:dd:49:91:3a:80:18:30:7f:1c:39:
69:32:2d:c6:79:27:28:df:6a:8d:a2:7f:02:0d:5a:16:2a:1a:
45:7c:6e:2b:47:28:5f:c2:2e:3f:96:57:de:aa:2f:0d:71:7e:
1b:d3:4f:57:ba:7e:05:74:14:69:c6:e5:98:48:69:8f:30:69:
4f:3a:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:23 2025 by rpki-client