Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e5614a5-b4ca-30d9-8bcc-1dd2cf3e7e81.roa
File: 5e5614a5-b4ca-30d9-8bcc-1dd2cf3e7e81.roa (raw, json)
Hash identifier: VRYivpvxIfhr3qGhpgkXxrOg2Ai9TQM/d29gJe+Wuas=
Subject key identifier: D5:9B:4F:02:F8:8B:00:C6:80:E5:3F:F8:76:A6:26:03:5B:C6:93:84
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C50CC2E3682A09A5FE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e5614a5-b4ca-30d9-8bcc-1dd2cf3e7e81.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 32552
IP address blocks: 2001:470:3a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c5:0c:c2:e3:68:2a:09:a5:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=149b462e-cfea-4d2a-92b4-4f2e9f53d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:52:1a:97:07:e7:59:ce:cf:cb:a7:98:9e:
12:e2:6d:29:32:4a:56:ea:a3:a3:ff:87:53:27:1a:
39:7d:c6:95:27:40:32:5e:6f:da:e5:4c:e4:dc:13:
5e:ba:79:fc:ef:a6:21:21:b1:73:5f:f4:a8:d7:b6:
08:ab:9a:9b:50:34:83:98:6d:53:aa:10:a8:29:05:
5b:1a:e2:77:15:e1:d9:fb:57:2d:0b:fd:bc:a4:88:
ab:37:c6:b3:5d:fc:6d:7f:42:cd:d6:e1:a3:94:2b:
2c:b3:0f:45:32:31:39:be:b0:c7:56:80:b2:75:79:
bd:4b:a2:e4:53:6f:a4:02:5c:59:3c:0e:18:27:0a:
a6:34:14:bd:f5:11:ca:4b:15:6b:31:87:a0:0a:02:
3e:dc:c9:4b:e1:30:ea:03:d9:9f:cc:a3:96:a2:7c:
dd:ea:a4:18:e0:43:ba:0d:b3:90:7c:c0:7b:b5:8c:
dc:0c:cc:9d:d8:7b:12:9e:6c:85:34:0b:d9:cf:91:
d6:8d:de:67:58:6e:5f:73:ed:9c:7c:60:96:e1:5f:
64:34:a7:cf:88:4d:37:74:c7:c1:a8:85:fd:7e:7e:
95:d8:67:fb:26:7c:02:fd:f2:ac:65:4d:a4:78:de:
b8:11:a9:a0:73:88:f7:bb:3f:f6:84:77:ae:06:c0:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:4F:02:F8:8B:00:C6:80:E5:3F:F8:76:A6:26:03:5B:C6:93:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e5614a5-b4ca-30d9-8bcc-1dd2cf3e7e81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:20:74:6c:65:52:05:25:ca:29:bb:e8:ad:56:e7:66:eb:af:
1c:6c:45:51:3f:47:b5:59:d5:e4:cc:21:3e:b0:3c:87:5d:14:
a4:c1:0d:21:71:f3:e5:e8:7b:fb:9d:10:3f:98:72:f5:10:e2:
14:6a:c4:fd:4c:85:45:11:16:61:73:9e:cf:fa:76:18:c9:39:
d2:5c:90:d6:2c:d4:e1:31:71:a2:4a:71:21:98:ab:2d:6e:ca:
28:23:af:32:c1:87:9d:d1:97:4f:d1:9d:97:be:62:3e:ca:a4:
19:bc:cf:4b:fd:65:48:02:2b:58:08:af:fa:ef:3b:dd:4e:26:
9d:53:64:6e:8b:42:e7:47:91:72:9d:32:d0:99:82:11:b2:9e:
5b:2d:37:4f:39:07:03:29:c0:2d:40:13:f3:cd:f0:a9:5a:1b:
e4:b8:53:df:30:be:f5:06:2d:2e:89:cb:7d:4f:c7:ba:a0:62:
0d:2c:c9:a4:ed:5c:16:e1:32:c1:51:e6:76:1c:29:ad:2c:fd:
cf:b3:e3:8c:cb:69:b9:37:97:a7:76:8b:a3:6f:a8:2c:28:e0:
e9:08:16:27:f0:2a:2e:02:86:2f:68:ec:ce:8c:e5:dc:ac:7e:
e4:38:97:3b:4e:a0:e5:49:eb:f5:1d:27:6d:3f:ea:f6:7a:9a:
eb:73:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:55 2025 by rpki-client