Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76d31e42-a59b-3998-b63d-e49d073d6752.roa
File: 76d31e42-a59b-3998-b63d-e49d073d6752.roa (raw, json)
Hash identifier: oLz7j3qQR4hzAgOLIHe20ym8wRT87x9yYxfPUaKIAZ8=
Subject key identifier: 33:DF:8C:17:3F:FF:CD:6E:64:F5:16:7B:BF:22:98:B2:3D:BD:AE:CA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C4099B216FEC394F6BB0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76d31e42-a59b-3998-b63d-e49d073d6752.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 31769
IP address blocks: 2001:470:172::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c4:09:9b:21:6f:ec:39:4f:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=cc378bec-eeb6-4066-bf6e-738719b17398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:53:e9:4e:73:21:87:df:80:54:f5:59:a1:fa:
da:9d:e0:bb:b6:db:8e:5f:c8:3e:10:b8:3d:01:a5:
34:b1:fb:d0:2c:cd:ae:e6:f9:df:6a:0b:ab:1a:c2:
c8:81:de:1e:a4:22:45:0d:8a:97:74:0d:8d:dc:74:
93:32:a8:a0:6b:ac:56:a7:fa:8e:3f:6c:b4:ac:05:
4b:96:54:73:66:33:2e:3f:af:45:3f:a1:87:3c:dc:
b6:c5:55:b3:70:84:a8:32:47:17:9c:a7:72:a8:7f:
35:df:31:84:88:79:cc:3f:4a:49:b6:8b:16:b6:c5:
9b:06:d0:32:46:a7:52:ad:a9:8b:3e:99:3e:64:d0:
cd:2e:6a:eb:fa:f3:e5:12:af:53:9f:08:4e:ec:5c:
3b:fe:b5:db:a2:86:74:b2:1f:cf:e9:30:e5:8a:ac:
41:b2:9a:2a:9e:b2:6b:e4:99:c7:0b:cb:8d:1f:af:
f8:2e:a3:e3:49:bf:b7:6f:1a:ea:15:42:69:fc:29:
55:c7:42:7e:fe:95:cd:13:84:60:87:32:4c:b8:06:
ba:e5:a7:f2:c4:78:08:c7:ec:f2:d7:81:52:f1:7e:
0f:b8:b3:07:9d:3e:38:64:86:28:f7:0d:d9:31:5e:
c8:9f:a0:06:18:71:68:62:43:9a:f9:83:ef:b0:79:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:8C:17:3F:FF:CD:6E:64:F5:16:7B:BF:22:98:B2:3D:BD:AE:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76d31e42-a59b-3998-b63d-e49d073d6752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:172::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:2a:68:eb:b6:66:cf:b8:e1:7d:9f:1c:a3:94:a5:79:47:11:
e4:28:bb:c8:94:a8:0f:33:05:44:11:b2:97:91:9e:d7:14:39:
71:ec:7e:89:27:8f:ce:f9:08:1d:d9:67:2e:fc:3c:ca:f8:e7:
be:ae:f6:9e:b8:f9:3a:fb:f9:06:36:08:35:d9:da:86:64:27:
20:26:17:b2:00:ab:03:b0:a1:cf:6f:e3:c0:56:e9:0c:53:16:
de:6c:ce:d6:17:c4:7b:d9:93:ef:fc:34:c3:56:2f:ee:8f:1e:
1f:92:98:82:14:22:f2:e8:10:07:10:8b:ee:e9:36:5a:a5:37:
be:6c:03:da:2d:cd:1d:4b:4a:7c:ff:d5:7f:f7:d9:5b:8c:e9:
e7:99:9b:ce:81:e2:53:71:a2:dd:0b:32:44:8e:72:5d:d9:26:
d5:6c:bb:90:6b:58:53:57:88:9d:1b:ff:e4:09:40:ed:69:f9:
36:99:cd:07:d0:35:25:b5:84:2a:a4:a6:0b:7e:4f:de:ec:b4:
39:3f:98:01:90:61:20:0a:f2:9c:eb:fe:d7:8c:b4:ba:da:d5:
4e:be:3b:e8:4f:ee:3f:3f:4e:de:8c:11:2f:87:1c:91:9d:f0:
a6:49:11:8b:f1:fe:cf:1b:7f:f0:56:43:d1:f6:3e:98:84:d4:
73:fc:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:08 2025 by rpki-client