Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7817c3c6-77bb-3274-ae7c-ea517252aaf4.roa
File: 7817c3c6-77bb-3274-ae7c-ea517252aaf4.roa (raw, json)
Hash identifier: pV4AkLP+OyZoRma8Q8u8ZPRk0hbkgBv7rzwfyPnUze0=
Subject key identifier: 77:DA:6E:E6:9E:15:FA:9E:24:65:39:BA:2D:67:C1:F6:A5:C3:5B:8A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C642501AE4005C7DFF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7817c3c6-77bb-3274-ae7c-ea517252aaf4.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 17211
IP address blocks: 2001:470:1c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c6:42:50:1a:e4:00:5c:7d:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4f98efa7-d203-4942-a859-c74ac4b4d441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7d:ce:d8:08:80:89:e9:3e:15:45:b5:fb:5b:
15:a6:8a:14:7d:06:3c:9f:c3:79:2c:f6:75:13:0b:
2a:32:ad:71:80:71:94:d5:2e:fb:c1:a3:95:f6:c9:
73:c1:8b:41:4f:87:94:86:25:eb:db:11:ef:e1:e1:
36:c4:55:ba:ab:28:8c:29:37:a3:7a:93:15:ef:dd:
b4:4e:96:a7:c6:b3:79:b7:ba:2d:19:c0:c3:f0:a2:
b3:6a:a5:12:2f:40:8c:b2:fc:36:49:e9:b5:29:2e:
6d:73:5c:32:00:ec:6e:5d:9a:3b:1f:e7:1c:b8:b1:
59:5e:e9:4c:1f:98:95:b2:70:3f:cb:39:34:f6:95:
e1:ff:9b:c3:f3:85:47:eb:cc:e1:bd:0a:e3:45:09:
6c:b6:4f:ed:88:e3:9b:3d:ef:7d:7a:79:3a:11:87:
86:82:bd:e8:6d:bf:0a:5a:d6:b6:7f:90:b0:91:67:
ab:7c:18:f4:ae:f9:c0:df:c4:0f:09:5d:5a:6e:25:
aa:3a:ff:54:12:38:cb:2a:c7:da:c5:ce:85:0e:37:
b8:ba:c5:ed:f5:07:62:c8:18:d4:ff:d0:6b:69:b4:
dc:29:eb:38:d2:0f:76:a8:cc:45:7e:c5:13:41:a8:
66:36:f6:0a:21:40:75:e5:54:c4:11:f2:9f:6c:30:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DA:6E:E6:9E:15:FA:9E:24:65:39:BA:2D:67:C1:F6:A5:C3:5B:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7817c3c6-77bb-3274-ae7c-ea517252aaf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:8f:4b:30:6b:95:68:1f:48:b4:2c:52:29:47:f4:33:9e:be:
9e:3c:34:75:47:89:e4:3d:03:29:02:ed:30:3e:60:61:8a:e4:
cb:bc:fc:f1:73:85:38:82:c8:88:80:17:7e:90:02:67:db:a3:
05:e5:fa:cd:68:e5:7c:2a:9e:51:85:0f:42:56:02:6f:c7:e5:
d1:1a:c5:26:a9:bd:d7:be:bb:1d:2f:73:73:5e:59:c2:6a:bd:
48:cb:4f:19:5b:36:af:52:38:22:8a:7e:1c:6d:91:86:74:ab:
06:92:bf:c5:b2:b9:3b:c8:7c:ab:34:5f:c8:27:05:87:95:26:
b7:be:52:10:f3:ad:a7:5b:f3:e6:6b:3b:90:c4:c8:9b:58:25:
3e:ba:0a:7b:6f:fd:41:a8:b6:c4:2d:a8:74:ad:15:f6:43:82:
07:75:4a:25:64:95:78:36:45:7a:72:a2:41:bf:54:91:22:c2:
3c:a2:d4:f6:cd:fd:a6:9f:52:a5:61:6e:d9:e2:96:de:b0:f1:
cb:d3:99:80:31:f7:ef:5b:1c:a4:b8:8f:88:9e:39:59:cc:80:
fd:27:a4:3d:1b:26:4b:00:a8:4a:67:0b:f5:7f:57:ab:41:83:
b5:12:4a:ee:d8:e7:fa:91:2e:19:16:99:9b:21:a9:b0:06:6b:
a9:b5:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:37 2025 by rpki-client