Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88dfdb14-96c6-3226-b1e9-aac59b9fa64e.roa
File: 88dfdb14-96c6-3226-b1e9-aac59b9fa64e.roa (raw, json)
Hash identifier: YLSpYYiHR/6gh+5c4GU3jT14EBvpTttL5sj9nu3iAZk=
Subject key identifier: CC:DF:DC:08:78:F9:EC:07:D0:2C:ED:A1:52:F1:F2:CB:02:82:35:9B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849072A8DB1A094724E9CDB2EC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88dfdb14-96c6-3226-b1e9-aac59b9fa64e.roa
Signing time: Fri 28 Feb 2025 02:30:13 +0000
ROA not before: Fri 28 Feb 2025 02:30:13 +0000
ROA not after: Thu 29 May 2025 01:30:13 +0000
asID: 214504
IP address blocks: 2001:470:40c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:2a:8d:b1:a0:94:72:4e:9c:db:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 28 02:30:13 2025 GMT
Not After : May 29 01:30:13 2025 GMT
Subject: CN=4d488c3e-0912-4865-abb6-0b8c8560f724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:60:2e:51:13:13:86:d6:51:5e:a9:f0:23:
6e:1c:fd:fb:f1:7e:78:12:4f:90:7e:eb:5c:c0:eb:
f3:7c:81:18:88:a0:b3:a9:91:5c:ed:ff:4f:f2:9b:
6d:fb:3d:84:b0:86:f8:02:b1:ca:41:da:d3:78:09:
ca:e2:7b:c0:d1:f7:48:f9:52:40:4e:67:77:db:66:
f7:30:d7:19:40:98:57:d7:31:6c:a0:f6:4f:7b:9b:
43:a8:f6:87:bf:7f:4b:ee:8f:4c:97:c1:bd:66:11:
c9:2d:b4:5f:ce:c5:7b:44:3d:6e:98:94:5a:89:74:
db:75:b0:1b:37:e6:63:96:dd:db:9d:2b:fc:37:a3:
fd:70:d6:25:77:a8:bd:c1:0a:97:4d:ce:a7:f2:2b:
04:00:90:18:d5:34:08:cc:be:27:ce:93:33:b8:55:
61:40:62:28:2a:c5:78:49:76:19:26:05:8b:30:62:
67:e2:5a:b4:7a:9e:8b:e8:65:79:b7:d7:bd:ca:4b:
80:c7:14:3a:a4:95:9e:fd:98:53:6c:ec:a8:2a:d2:
a9:05:2a:10:90:91:cc:9e:56:c9:8e:0f:b2:64:f4:
81:0d:d9:e1:61:aa:d1:b3:8b:a9:87:ec:59:b9:3a:
b2:f4:fb:d5:7e:aa:b0:36:be:30:2e:18:26:ee:8d:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DF:DC:08:78:F9:EC:07:D0:2C:ED:A1:52:F1:F2:CB:02:82:35:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88dfdb14-96c6-3226-b1e9-aac59b9fa64e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:40c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:11:11:0f:47:4e:bd:51:e5:76:a0:08:32:20:93:09:1e:d7:
dd:89:f0:a9:c4:d2:83:50:63:53:8c:cf:0c:07:74:47:e7:96:
84:7f:83:b4:98:2d:af:b7:68:b4:75:15:8e:c8:e8:5d:0a:07:
11:a4:27:a9:b0:68:0c:82:b3:2c:26:b6:e7:0d:56:48:52:e2:
01:40:03:c9:2d:38:6b:9f:5b:ae:ab:6a:75:8e:a3:b7:91:fc:
53:9a:92:0d:b6:d0:d9:f1:35:69:7f:5c:12:b2:62:9d:ed:86:
1b:25:54:44:a6:b1:f3:c1:c1:45:d4:93:9b:14:da:dc:a7:a4:
de:08:08:4c:b5:63:bc:88:25:5e:2c:5e:d8:fe:55:ed:b1:1a:
1e:ad:56:53:b2:14:6c:fc:b3:af:02:ea:a5:98:92:93:d6:d4:
51:79:09:2f:ae:9d:ff:15:bf:5e:ff:18:76:29:4c:d3:29:ea:
3f:d8:e5:9a:1f:f2:6e:ee:60:70:3d:d5:b6:dc:ec:9c:40:53:
4f:45:86:f6:35:2a:8f:ab:6a:b7:2c:be:c8:20:ad:58:0b:ae:
5d:7c:39:c8:90:49:18:5f:c3:0a:ff:ca:65:7c:5d:a0:54:f5:
89:ff:40:89:80:e2:2b:cb:26:7a:b4:e2:93:f1:05:35:64:8d:
22:c5:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:23 2025 by rpki-client