Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9390f67b-d69f-38c9-803b-a3928f297159.roa
File: 9390f67b-d69f-38c9-803b-a3928f297159.roa (raw, json)
Hash identifier: 2NVt1+IFEAO8EMQ82kqy81PNCmS3mqulyZpBNnHzIXk=
Subject key identifier: B7:F9:62:62:55:CC:DE:ED:35:B2:A5:D7:81:CD:47:67:37:E7:A0:34
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D0784C85BAC904F5D9C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9390f67b-d69f-38c9-803b-a3928f297159.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 395717
IP address blocks: 2001:470:2e8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d0:78:4c:85:ba:c9:04:f5:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a7b89afe-a70b-4b5b-a025-c9f3fc8f8d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:b6:d4:9e:ad:89:6a:d5:94:79:96:6c:71:
24:98:4f:45:74:e6:ee:87:cb:f4:d0:37:27:92:a0:
f4:4c:85:72:66:e3:1f:5b:e4:4e:74:04:a1:94:84:
d2:4a:a3:b6:1d:f2:a7:87:8d:ac:06:ae:f5:19:aa:
b2:8e:3a:64:53:11:ef:dd:0f:11:be:90:39:8a:fb:
af:1e:04:ab:04:34:f1:8a:04:cd:de:dd:1a:98:43:
55:5c:87:83:a2:e5:46:c2:30:df:8b:8d:85:db:6e:
cb:0f:e1:6a:df:ca:fa:1d:83:ec:c8:16:2b:a1:be:
df:49:41:f1:e2:ee:4f:81:33:62:7e:92:29:87:8f:
5a:19:99:08:44:95:79:9e:69:1c:ab:0c:f9:a3:95:
a8:4f:8f:c0:59:8b:77:cd:7d:f1:98:6d:12:03:65:
ab:d1:04:ce:80:60:db:10:bf:ee:ba:13:e3:af:75:
cf:6d:08:38:e3:9d:93:57:d2:ed:da:2f:8e:99:81:
ad:68:2c:36:3e:ed:23:1e:23:5a:2c:ee:1a:a3:0b:
c0:07:6e:56:c2:ba:54:65:36:05:5f:bf:2d:49:32:
4b:95:73:5a:96:19:0e:02:95:75:59:5f:ed:25:e5:
61:1c:3d:3d:61:42:1f:9c:a7:1d:ce:0c:85:2b:ee:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:62:62:55:CC:DE:ED:35:B2:A5:D7:81:CD:47:67:37:E7:A0:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9390f67b-d69f-38c9-803b-a3928f297159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2e8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:19:ae:9c:9b:cc:0f:90:6b:2d:6f:47:39:2a:07:67:85:00:
b6:6b:04:28:7d:ca:f3:a1:b5:21:3b:80:20:73:17:8b:55:01:
07:a3:36:cc:16:fe:51:71:53:2d:02:7b:ba:e4:17:fa:89:7f:
34:f6:66:bc:07:2c:17:05:cf:da:4e:db:96:f8:a4:2d:e9:94:
1b:4e:5e:c4:59:82:99:74:8d:67:bd:30:9a:48:26:8c:0d:bc:
65:bf:cc:df:5a:da:98:32:9a:90:eb:f3:4f:41:f9:d3:40:4f:
71:0c:87:2c:99:b5:90:3b:14:ba:79:6a:32:5e:8f:bd:91:c0:
ac:29:ff:b3:76:65:17:39:e3:8a:ea:4c:84:6e:ea:a2:21:49:
64:b5:84:4e:94:99:46:80:f4:fd:be:c5:8b:67:1f:01:7b:a2:
63:d4:25:65:8e:8e:eb:1c:50:74:8b:8b:76:8d:e1:58:04:83:
90:be:ce:5c:f8:2a:4a:4e:0e:b9:f3:bf:ab:9e:f1:f5:74:4b:
15:cd:2b:50:24:09:78:99:7d:2d:95:ca:41:8f:a1:e6:96:c5:
8c:20:0f:b2:34:1d:bd:b6:95:c6:65:7c:fc:3e:e7:4b:3d:bb:
fc:e0:97:c2:cd:23:cf:76:2e:ee:b1:b9:33:54:0c:81:dc:75:
5b:41:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:49 2025 by rpki-client