Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70bb71dc-0717-3e41-9c28-47be611ce241.roa
File: 70bb71dc-0717-3e41-9c28-47be611ce241.roa (raw, json)
Hash identifier: a86KWWOQzqxm9cvWFDjef82hRJq0JohFcPZJz2aA9jI=
Subject key identifier: 55:BB:9B:CE:D4:40:8F:0B:60:8F:F1:2C:A6:08:B0:54:54:6E:09:8C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858494FA290C8D29D6951E5360B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70bb71dc-0717-3e41-9c28-47be611ce241.roa
Signing time: Wed 26 Mar 2025 01:30:14 +0000
ROA not before: Wed 26 Mar 2025 01:30:14 +0000
ROA not after: Tue 24 Jun 2025 01:30:14 +0000
asID: 149290
IP address blocks: 2001:470:3d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:a2:90:c8:d2:9d:69:51:e5:36:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 26 01:30:14 2025 GMT
Not After : Jun 24 01:30:14 2025 GMT
Subject: CN=d251b07a-a652-4e64-8274-cccf76df6cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:d0:0f:bd:62:c5:1d:09:71:ed:22:d9:c1:
9e:3d:af:71:80:ee:6c:9b:d4:e1:74:fd:83:41:e5:
41:3d:9f:85:5b:35:23:9a:68:4c:94:29:74:1f:b2:
f2:79:61:d0:f9:10:07:87:bb:8c:34:6a:f7:80:48:
c2:4e:bb:6c:4c:46:6c:a5:c2:8a:e3:0f:5e:32:8b:
15:e6:b7:95:60:d6:cf:80:b1:5e:e4:ad:ee:f8:4d:
7f:f0:76:ea:58:80:ed:9f:b7:85:02:0d:68:df:d9:
db:8b:52:bd:aa:7e:e8:34:18:e5:15:fa:ee:ae:f3:
c6:e0:9e:45:f9:c9:e2:e7:95:7d:e7:6a:b5:a8:88:
8e:86:cb:35:4b:28:56:b8:5f:e8:a0:21:fd:8f:ae:
05:b7:2c:e0:10:2b:aa:be:22:df:b1:0e:49:df:fd:
fe:85:41:39:e7:91:2c:aa:af:cf:e3:9f:e1:95:dd:
6e:67:01:9c:a3:cc:24:24:15:a5:fc:e6:ae:e6:4d:
9b:3b:74:a6:4d:ec:93:a8:b0:7d:40:ca:d5:2c:d3:
1a:40:ba:52:aa:b3:cb:4b:3f:5e:9c:2f:2a:53:48:
7c:b6:4a:11:62:b9:e5:a4:a7:41:8d:16:18:33:29:
ef:17:8a:fc:76:d0:6b:db:0c:7c:4c:15:0e:10:f3:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:9B:CE:D4:40:8F:0B:60:8F:F1:2C:A6:08:B0:54:54:6E:09:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70bb71dc-0717-3e41-9c28-47be611ce241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3d8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:d7:8f:4f:2a:89:cd:b8:52:22:8d:2d:2d:45:29:a5:9f:14:
c1:57:79:c2:7a:93:a6:df:5f:a4:1a:98:59:fa:9c:6b:aa:77:
b0:48:1f:1a:84:d3:47:63:12:71:d9:ec:93:04:68:cf:e3:df:
a3:5f:d3:e9:63:7b:85:0c:dc:5f:73:6e:e2:cd:82:8e:1e:44:
e4:e2:0e:1b:04:b1:48:99:63:e2:db:94:0e:1b:8e:01:1d:c6:
38:dc:4c:56:69:75:5e:32:1f:73:5a:d9:e3:ad:9f:7a:cd:55:
6f:2b:58:51:19:a0:40:c9:af:c0:fc:26:1b:8d:9f:4d:4c:a3:
51:08:ef:97:de:ea:e1:cb:22:cf:f5:c3:20:e6:a4:03:1b:75:
c9:a6:b6:d1:e6:cf:c0:17:44:7e:07:fe:80:d6:e9:42:fb:36:
e4:a0:06:c2:2b:50:0d:66:17:fe:57:7a:bd:10:18:eb:f0:b7:
04:63:e9:6c:1c:0a:e2:d6:0d:0d:e5:3e:55:54:ea:43:a9:80:
2f:46:bb:8f:21:d5:bd:d3:74:2f:f4:e9:4f:a0:0e:8e:a8:e2:
04:fd:26:da:c7:a3:6a:52:92:e2:93:e0:94:bd:f8:22:33:2d:
fa:5d:20:2c:1b:1c:ca:a7:fe:2b:81:8e:40:08:84:fc:96:94:
5f:ba:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:09 2025 by rpki-client