Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa
File: 85f9682d-7d53-3d36-93a1-3376b5c05034.roa (raw, json)
Hash identifier: cRMSdBJLGYYsViXwBLxkHcokbIf/XspVO5b+nV5jGdE=
Subject key identifier: 72:B8:6F:2D:E1:F2:8A:AF:55:E9:3F:3E:72:DB:43:17:51:02:20:B1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858494733F1BE3BCF85EE0EF189C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 15267
IP address blocks: 2001:470:345::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f1:be:3b:cf:85:ee:0e:f1:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=e5e4ed85-e64f-4848-8df3-91fd5ccf728b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:65:91:96:0f:fa:be:0b:b1:0a:fb:c8:22:
36:65:a5:0f:c8:ea:ce:52:09:09:6a:a7:c0:a5:2e:
43:15:59:5a:b3:96:02:15:b3:03:c6:e2:45:4d:88:
47:a3:a8:10:74:79:96:c9:d1:1d:89:08:4e:88:0a:
04:ce:4f:dc:28:b5:d9:0d:bf:8e:a2:43:cc:64:60:
92:c3:c9:ca:00:e8:89:ed:2f:e0:2e:30:c2:73:34:
12:d8:79:96:47:2f:83:45:f7:76:6f:b5:11:11:e5:
38:b2:81:82:80:77:f4:8d:9c:bd:2a:01:ed:14:1a:
ce:6a:99:2e:90:2b:b3:9e:d6:41:22:b0:b9:73:28:
6e:bc:1f:0e:9f:4b:be:5a:4f:d4:79:87:50:75:98:
38:f7:e6:19:13:70:e2:42:13:5c:6b:b5:13:9f:e0:
39:38:1a:58:b7:37:c8:b1:66:21:7c:72:1b:b5:27:
43:b6:01:ea:61:2b:a5:b0:2d:9a:79:13:6f:45:44:
2a:ce:fd:ec:b7:fd:4a:0a:2d:29:2a:90:17:7c:46:
5b:64:90:4e:cf:bb:b2:8b:fe:b4:60:0a:89:8a:59:
22:d1:c7:eb:d6:77:ab:9b:12:02:e0:c4:02:32:a7:
a3:ed:35:bb:46:55:77:30:5c:71:3f:2b:81:c6:13:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B8:6F:2D:E1:F2:8A:AF:55:E9:3F:3E:72:DB:43:17:51:02:20:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:345::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:66:8c:99:ac:ea:d8:e6:04:07:dd:df:bc:f8:65:42:95:59:
7f:04:59:52:ba:12:53:98:dc:d5:48:16:f5:6b:6d:67:ea:f6:
77:b3:ae:65:b6:d6:b8:d1:63:b4:7e:b4:89:c8:75:04:06:c5:
56:c1:db:1a:a5:e4:c4:94:fa:5b:e3:c5:89:74:f8:f9:cb:de:
8a:e6:82:8a:dc:cc:82:29:24:d8:e7:4a:5e:e0:b3:b1:59:5a:
b5:6f:50:6d:16:ff:59:36:46:64:0a:82:a8:4a:f4:db:84:b8:
e1:c5:2c:76:00:87:bf:1d:c8:ab:a3:37:53:77:23:b4:99:c1:
88:79:ba:80:8d:9c:f9:98:6b:90:40:d5:ea:7e:32:f7:20:70:
0c:93:e2:bf:35:14:3d:08:d5:78:31:23:30:4d:18:2d:de:d1:
02:29:c5:bc:ff:14:0f:8f:f8:ef:08:13:64:81:18:46:e6:aa:
ec:2b:98:dd:af:8c:8b:f5:a7:1d:5c:53:0d:75:1c:eb:08:8d:
10:a6:62:4a:b2:b4:3c:5e:58:07:1d:ce:82:24:75:d9:8f:85:
ee:d3:7d:4d:1f:fe:2e:f4:b9:78:c1:e1:5f:fe:c3:13:bd:bb:
9a:15:48:60:2e:f6:cd:79:ea:82:79:4c:39:35:53:a3:a1:b7:
6e:fd:de:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:49 2025 by rpki-client