Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa
File: 6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa (raw, json)
Hash identifier: AAx20tENt1MrbwdCJVxazvAwyWZx2jxv7uvRZv5KQeg=
Subject key identifier: DE:08:11:CC:50:FF:B9:EB:5E:59:45:DB:69:36:B0:50:C4:F7:44:37
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858494733F1CCDC7B50DA4747BD20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 200428
IP address blocks: 2001:470:344::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f1:cc:dc:7b:50:da:47:47:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=90e070c2-a175-4a47-9db6-b07b4c5aed5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:45:75:61:04:ed:ce:dc:bc:e5:7f:5e:43:
66:33:a0:f8:3e:26:f7:7a:dc:b1:76:d9:27:3f:67:
20:8e:67:7a:3a:fc:ad:73:d3:0f:a7:11:50:54:1a:
31:18:8b:22:a8:86:68:0a:2d:2e:6e:ec:c0:b5:8b:
47:14:81:6c:fb:81:7c:0d:2f:1d:9a:ef:b3:e7:48:
16:f8:31:a4:40:6f:e2:9d:72:1b:33:3c:a4:50:a4:
ae:11:95:5c:43:6b:94:e2:14:a4:6c:20:e0:2b:69:
ea:6c:99:d2:0b:10:04:c6:6b:1d:59:c2:ae:e8:52:
80:db:dc:8e:c4:7b:17:f7:01:b6:51:b3:a3:42:f0:
30:51:2f:eb:36:35:d2:72:3c:75:b5:ae:f8:60:8b:
56:8d:d3:09:32:8c:43:c2:7b:cd:31:fe:a2:85:4a:
fe:a4:2f:8f:e4:e7:03:fb:1d:ba:59:8d:c3:a8:1c:
63:ae:0c:65:6b:a3:ac:2e:9a:65:4b:8e:4e:27:ac:
2a:96:a6:ee:4d:65:8f:11:8d:af:89:b9:7b:68:57:
63:12:26:f8:f0:7b:0b:3d:4d:31:2e:5a:97:7a:44:
05:7b:d9:bd:35:5d:e3:5e:d7:f9:26:3c:4f:03:bb:
28:15:80:cd:20:4b:e7:99:f5:a6:4a:b4:f9:7d:84:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:11:CC:50:FF:B9:EB:5E:59:45:DB:69:36:B0:50:C4:F7:44:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:344::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:a2:4d:2a:f4:d7:3e:b4:eb:c6:ef:ed:9e:19:ce:c6:7c:3b:
bc:91:74:ee:8e:3e:c1:a1:88:1a:c1:08:a4:6d:c1:55:a1:d9:
ab:5b:77:62:76:3c:27:4d:5d:70:dc:16:16:62:00:43:94:22:
e6:c0:b8:6d:96:af:2c:e4:8e:43:0a:ea:a5:b2:a1:3a:a1:d3:
80:6a:84:64:f3:0c:f6:71:d3:a6:39:c4:aa:14:2f:e5:35:a9:
76:1a:3d:36:a1:04:32:9f:c7:e1:70:64:0c:37:4e:1b:68:1b:
c7:bc:f5:e4:19:92:2b:47:1a:65:c7:d4:22:cf:c8:2f:6a:1f:
45:62:ce:0e:29:60:9b:c0:52:a4:8d:bb:67:58:19:ed:c9:fe:
6e:de:73:90:a6:99:e7:ad:82:5b:35:d6:97:93:4f:b1:e4:86:
30:65:11:21:4e:2e:a5:9d:02:56:33:2a:3e:2c:b9:b6:7b:39:
f2:93:1b:03:7c:14:60:42:3f:48:65:5b:8a:f2:d8:af:4d:7b:
9b:cd:aa:d4:8a:b9:c2:c4:14:b0:f5:7b:36:ce:03:68:47:1d:
3f:91:33:dd:41:f9:39:81:ca:8f:4d:ef:d0:de:2b:a3:b3:dc:
bf:7f:8a:97:3d:73:f1:ff:0c:99:3d:25:9e:c6:26:71:ef:1a:
19:5f:ef:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:22 2025 by rpki-client