Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82407c66-09c3-36e2-8586-b1e0fe01e197.roa
File: 82407c66-09c3-36e2-8586-b1e0fe01e197.roa (raw, json)
Hash identifier: TjH9ylrdN3QS80voOBuSi1dpY/7ADYLykRE90y6vQIU=
Subject key identifier: A7:1E:47:E1:F5:97:5B:2E:27:A1:11:51:82:A3:97:D4:D8:F6:13:91
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E6CA9C76BD0CD92ACE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82407c66-09c3-36e2-8586-b1e0fe01e197.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 149994
IP address blocks: 2001:470:2b7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e6:ca:9c:76:bd:0c:d9:2a:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=338b83ce-7bd3-428b-bf56-8d26c57cea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:13:0e:99:0b:33:0e:67:69:15:49:e0:be:
eb:89:f0:bf:be:08:7d:13:ed:d9:0b:3d:f9:85:91:
f8:87:21:1a:67:2b:a3:b6:17:38:3f:35:ea:5b:14:
e0:75:15:76:b7:bb:05:e9:df:fa:4b:50:a6:00:10:
5f:cd:49:bc:8f:14:00:2d:32:30:68:a5:22:c7:68:
c0:eb:53:a1:a4:b6:a0:35:88:83:7b:d4:7e:73:46:
97:8f:2d:d5:26:4c:9d:fb:a3:f7:50:37:9c:72:a9:
65:36:1c:ed:e6:cc:6b:ec:3d:33:8d:43:2a:a5:73:
4c:24:fe:85:ab:60:c1:b6:9e:38:84:21:de:e4:f3:
2c:5e:9a:7e:8c:5b:0e:a7:cb:b6:bd:25:fe:6a:fd:
2f:2e:ed:17:ba:a7:b0:8a:f0:53:7a:42:75:7a:45:
49:81:fb:74:65:03:15:b6:b9:d3:ba:f2:31:05:dd:
f4:e4:9c:86:4b:37:2d:e9:69:00:17:ef:fb:c7:3c:
36:1f:48:91:41:8e:ff:22:f1:4d:34:d3:fa:86:ff:
eb:0d:0d:e3:5c:27:49:56:78:b6:80:c2:35:11:1a:
b8:ab:6b:dd:6d:2f:56:40:fd:16:fa:de:9a:f9:fc:
40:3c:d7:a0:21:df:eb:12:1f:3d:e4:4b:8c:d5:39:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1E:47:E1:F5:97:5B:2E:27:A1:11:51:82:A3:97:D4:D8:F6:13:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82407c66-09c3-36e2-8586-b1e0fe01e197.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2b7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ef:a8:6b:ec:15:d8:e5:58:8f:5d:06:74:14:6e:95:7d:e3:
f8:88:b2:41:81:4b:82:90:7e:da:64:3e:76:13:18:a8:7a:5b:
fd:9c:16:fb:ed:3e:7a:6a:e1:de:7e:3f:a9:94:cf:95:27:f7:
41:1f:f9:8e:f5:84:4a:6d:1a:00:7c:43:ae:fa:9d:0e:ef:82:
18:b9:c7:57:e1:3b:c6:31:ed:44:97:1a:9f:3d:da:0a:8c:97:
b1:e4:f1:22:9c:4e:d3:3e:b1:09:3f:9f:48:af:b8:4d:2b:42:
d4:30:41:87:21:01:0f:f8:b8:ff:c0:62:fb:bc:a9:91:7a:17:
ff:8a:6e:f3:55:ad:77:ad:57:cb:a1:87:99:08:14:57:7f:67:
0e:fa:a7:71:49:d7:d5:ce:ef:f5:48:b1:8b:cf:49:0f:12:db:
9b:21:fb:7e:4e:84:50:4b:be:1a:71:66:e0:ed:92:0c:d4:76:
91:13:d2:5e:29:2b:8a:87:4b:69:84:d3:0e:d3:2c:7f:bb:0b:
e9:47:14:39:0a:3c:4b:cc:16:5d:34:8c:b4:f3:f2:3a:89:0b:
89:19:b0:2b:fc:d4:38:e7:a0:7c:df:69:24:bd:81:94:45:6f:
fd:b3:4c:47:3d:4f:d3:44:f6:cf:10:fc:03:58:07:c2:f6:b6:
95:88:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:44 2025 by rpki-client