Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa
File: 658691af-bff9-310a-8e0e-981cec48f097.roa (raw, json)
Hash identifier: v+AKFgHAwmBvXk0bYXjHrGfpTI0VITzUOvbX4Y3Thhk=
Subject key identifier: C9:CF:B7:59:9F:55:06:CC:F8:C8:4C:7E:E6:EA:C6:C5:AA:52:0B:90
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926CD157DECFB4D0AA1B600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 206186
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:cd:15:7d:ec:fb:4d:0a:a1:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=2a0f4289-fda1-495c-ae17-eca167cfa51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:d1:52:2f:79:9c:90:63:6b:16:08:a3:fd:
07:0d:74:91:3d:92:30:1c:21:10:d3:19:07:eb:bf:
6d:51:21:22:07:4f:cd:29:a4:ed:65:fd:bb:93:19:
24:d7:0c:a4:b6:fc:3b:4c:a1:f5:ff:11:60:ee:7f:
74:d6:2c:c9:bc:97:32:f3:1a:6a:c0:5a:bc:28:52:
ba:78:e9:a5:1b:9e:14:cd:84:c6:c8:e3:d7:5d:ca:
8d:61:9f:aa:59:7b:98:32:7d:ff:55:49:50:26:d4:
99:06:bb:f9:a9:0e:76:87:1f:6a:16:d8:5c:25:8c:
39:20:90:51:7e:13:72:8b:6a:03:6a:6b:79:1b:ce:
d5:eb:b5:18:64:d8:12:64:09:56:cf:19:8a:76:90:
0a:3d:fb:f5:5c:dc:77:c4:aa:0d:9e:22:bc:df:29:
60:67:27:0e:a0:79:0a:5d:57:3f:69:df:4d:bb:9b:
f2:3a:37:23:17:89:1f:bb:1f:f2:82:f6:2d:d9:00:
04:2d:57:80:37:0c:e8:ce:06:d4:d2:e3:56:8f:c4:
49:bf:0f:65:c1:fe:a8:7f:aa:7b:c1:c0:68:35:53:
02:6b:23:97:b9:3a:33:7c:f3:7e:c6:47:e0:52:df:
f1:a4:c6:ac:14:ec:c1:29:b2:ae:5e:27:f9:94:dc:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:B7:59:9F:55:06:CC:F8:C8:4C:7E:E6:EA:C6:C5:AA:52:0B:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:bb:0f:9d:82:fe:8a:f4:af:f5:8e:c1:b9:48:3b:36:3e:72:
26:77:0b:1b:84:f6:0c:b7:76:56:e7:07:e2:07:c1:1c:96:3a:
65:a5:9a:b4:63:80:a2:23:f4:56:43:1e:ba:d5:d3:67:d4:20:
04:b9:47:e1:c3:f2:cd:ad:56:13:ab:10:6a:87:1f:58:a2:5b:
ad:69:a5:4a:17:fa:7c:95:29:27:f2:ba:54:80:64:0e:ec:e5:
f7:da:ed:20:76:39:b5:b0:f6:e3:2e:7c:cd:59:32:f3:8e:2e:
05:5f:e5:9c:a0:b4:e0:e9:00:a2:cc:50:e8:0c:29:b6:5b:c4:
8d:4e:29:11:0d:7b:90:84:a0:8f:06:f6:ac:aa:83:0e:70:dd:
ea:b1:54:23:86:28:36:11:6a:d7:ce:79:f3:33:89:3f:55:5e:
b4:b8:36:c5:c1:7d:04:ac:72:b3:81:dc:42:dd:5d:38:8c:91:
6c:2d:67:99:67:29:c5:64:3d:65:d1:54:6e:56:66:03:f2:aa:
f3:84:12:37:95:b1:81:46:55:c8:34:0d:5c:b8:d2:e3:3e:85:
fd:2d:3a:92:a1:dd:f3:6d:32:62:0e:99:9c:9d:2a:a3:7e:52:
4f:88:bd:4e:4c:ed:1d:c2:78:96:0d:88:6b:43:2a:1a:33:89:
2c:43:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:48 2025 by rpki-client