Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f865ca-971d-3b25-ab4d-155bf4d6a773.roa
File: 91f865ca-971d-3b25-ab4d-155bf4d6a773.roa (raw, json)
Hash identifier: Mt9IjhpPQYCYECE1EfCFKA1HIJ9PRf2YkqCXjzEh77M=
Subject key identifier: 7B:16:30:AE:CA:63:86:08:C2:F8:1D:5E:28:79:DF:1A:B3:0F:68:60
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858489340BA64EA188347AE856040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f865ca-971d-3b25-ab4d-155bf4d6a773.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 293
IP address blocks: 2001:470:358::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:64:ea:18:83:47:ae:85:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=fb6432af-5aa0-4b96-9a7c-dc1d0f96503f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:7c:a9:57:96:db:fa:c5:3b:cd:cb:4c:71:
33:ee:29:8b:7c:b5:79:40:30:6f:81:9a:15:38:4f:
ee:32:0a:20:00:ce:c0:76:d7:45:a2:bc:c8:8b:3e:
e8:24:ff:a3:48:e2:3c:67:5d:c3:f3:43:d1:ee:71:
5e:75:89:76:93:45:c3:ea:5e:e0:ff:86:8c:57:55:
a6:f6:4b:27:86:09:3c:7e:56:4f:7b:fd:28:cc:91:
e6:70:8e:e5:bb:60:44:e3:6d:4e:bd:05:5d:60:ed:
ce:d3:5a:b3:f6:5c:5b:c1:9f:d6:22:a6:34:51:4d:
f5:fb:d9:2e:7f:40:f5:37:49:5d:9d:25:9b:28:ef:
13:b8:62:1e:51:b7:f2:55:93:d0:5c:6a:4c:25:d5:
04:f6:93:ab:11:c3:60:69:81:fb:00:98:81:e8:d3:
7a:14:d4:44:0c:a8:7f:c1:37:b4:1b:58:29:bd:42:
d0:bc:46:58:3f:6b:76:7e:d5:49:dc:a6:8c:74:de:
8a:ab:df:14:2b:6a:a2:e6:42:92:a7:55:d2:53:5d:
18:eb:62:9e:88:3e:26:50:a6:86:e1:8c:1d:db:1e:
9f:22:7d:58:06:5d:7e:3b:af:ef:be:70:58:6d:75:
e3:15:14:74:05:34:01:c5:db:46:03:0a:ac:f8:7b:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:30:AE:CA:63:86:08:C2:F8:1D:5E:28:79:DF:1A:B3:0F:68:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f865ca-971d-3b25-ab4d-155bf4d6a773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:358::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:77:15:4d:8c:01:36:34:a5:7a:29:a2:a8:c2:ab:28:cc:fd:
18:f5:04:b3:14:40:28:8e:5e:1f:c3:6f:c4:34:a8:4d:ad:81:
8a:91:50:c2:dc:a6:e6:42:02:1a:9c:45:be:4e:43:f2:89:ef:
77:25:62:10:93:0a:9b:17:54:6b:4f:19:5a:86:7e:92:e0:d8:
b7:45:6b:02:09:dc:5b:e0:04:e7:de:07:36:5f:55:b7:3f:db:
6f:9d:6f:f1:45:74:bb:c4:72:c0:c2:4f:a3:51:5b:ac:9f:45:
03:57:32:3b:bb:31:a7:cb:74:d9:54:67:bc:73:d9:cc:b6:2a:
47:be:ea:89:81:2a:86:8e:a1:68:f0:40:f1:9f:39:e8:a7:0b:
e4:d3:4f:81:85:5c:99:04:39:0b:6e:ec:c1:9c:18:14:de:95:
46:b4:33:44:f1:7a:1c:9d:4b:ca:2d:2f:37:b8:f2:d8:e6:17:
39:b8:a8:58:90:6b:29:96:3b:27:d5:38:26:9e:94:6c:34:ba:
16:7e:d0:04:bd:ee:b6:9f:99:70:44:e3:ad:e2:7b:dd:16:92:
46:3c:8c:4f:5c:a4:20:55:81:53:40:a6:8d:74:28:b0:f4:c5:
45:b4:cb:db:38:82:49:59:ad:ac:c2:d1:2c:37:3b:43:ab:fa:
d9:c1:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:29 2025 by rpki-client