Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890b31ea-42af-365c-9eb2-856d65078e43.roa
File: 890b31ea-42af-365c-9eb2-856d65078e43.roa (raw, json)
Hash identifier: vB5ED155egCH1MDApkG47A+Hy4AmKxm/ZjL2gV3HOck=
Subject key identifier: C0:F4:3C:45:D6:03:AD:23:66:EF:D3:4C:5B:0D:E9:B6:82:E7:1C:65
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584901952F15760FAE15A8FE0100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890b31ea-42af-365c-9eb2-856d65078e43.roa
Signing time: Wed 26 Feb 2025 02:30:13 +0000
ROA not before: Wed 26 Feb 2025 02:30:13 +0000
ROA not after: Tue 27 May 2025 01:30:13 +0000
asID: 4128
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:01:95:2f:15:76:0f:ae:15:a8:fe:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 26 02:30:13 2025 GMT
Not After : May 27 01:30:13 2025 GMT
Subject: CN=87354dc8-dbd1-4553-89e1-54dd83dc9147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f2:de:a7:bc:09:e5:89:80:d1:59:da:8b:3b:
3d:f1:c7:41:13:d7:87:3f:7b:ff:9f:36:72:80:ae:
d8:51:97:d5:62:46:dd:3d:f9:12:a7:21:40:4f:6a:
80:38:b1:ce:4a:68:6c:6f:7b:01:ef:66:7d:fe:9f:
7f:56:9f:1f:8d:72:6e:f9:f2:0c:18:8c:0a:0c:57:
6d:9d:64:23:6d:cc:51:82:2f:e5:2f:a9:a2:30:57:
84:db:6f:92:02:2b:74:60:a1:e6:79:44:4d:93:d8:
cf:2a:ea:da:2e:e8:f1:d7:82:15:84:79:a4:ba:a8:
cc:02:17:36:86:27:bb:f8:16:dd:b1:37:d5:b2:20:
49:e5:43:95:c2:fb:08:b5:00:73:e3:e0:14:84:5a:
bc:e9:9d:bc:8e:65:7e:85:bb:fb:7e:85:69:9c:d6:
a4:f0:42:81:9c:cd:18:d4:0d:62:61:ff:fa:65:55:
b3:f8:5e:a6:50:53:55:58:ed:ba:6a:f2:6b:f4:fa:
6e:96:2f:eb:68:11:23:c3:2c:ea:36:6e:4c:9f:59:
5e:b1:b7:bf:3b:7b:7b:e1:d5:e3:a3:9c:82:85:aa:
3c:0b:b3:e3:e0:90:51:42:be:7b:1f:e0:52:31:4d:
45:21:61:f7:1c:d3:77:dd:49:4d:66:b6:d0:0f:d6:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:3C:45:D6:03:AD:23:66:EF:D3:4C:5B:0D:E9:B6:82:E7:1C:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890b31ea-42af-365c-9eb2-856d65078e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:41:eb:7a:3e:a3:85:85:f8:87:a2:2f:d6:97:5f:af:7d:27:
55:53:b6:2f:ce:10:ab:a7:ed:cd:76:81:33:f0:cb:4a:53:89:
2f:87:56:10:c8:32:53:e7:05:5c:69:38:ee:12:e2:80:9c:08:
84:09:a6:3d:70:8a:ca:7d:b2:9e:77:7a:2e:42:4a:e4:2c:92:
2a:d5:92:7b:65:7b:8e:51:ad:f3:b5:06:90:92:56:52:e8:b8:
51:61:29:b8:48:34:17:c8:2d:64:c5:42:31:72:a4:9b:fa:3a:
2e:f3:ef:46:4e:cb:d9:00:4d:17:32:42:ee:9e:26:76:63:0a:
64:c5:3f:ff:aa:df:57:e5:14:76:63:37:ca:bf:f9:ae:d3:ce:
3a:f5:9e:ce:e3:ae:68:75:3b:de:34:92:98:f2:90:2a:23:e9:
e5:ec:70:a4:12:2e:2b:80:09:e8:64:33:c0:89:10:0f:e3:fd:
7d:24:c6:8f:42:ee:cc:46:e1:f0:85:1a:f9:98:b6:0a:d3:c4:
ea:57:59:9f:f1:5e:26:88:b8:a3:c6:12:47:47:8f:dc:80:37:
30:ae:fb:3a:b2:39:68:00:3f:09:10:99:d0:9e:9c:8b:88:21:
50:e6:b4:2a:1c:0f:70:c9:ba:c3:64:90:db:55:75:a5:ce:eb:
fe:bd:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:04 2025 by rpki-client