Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/964e4a18-25c8-36e1-8beb-645d7ee13fba.roa
File: 964e4a18-25c8-36e1-8beb-645d7ee13fba.roa (raw, json)
Hash identifier: rBz0Lz14pHTEkJ8eAD76VdMGctqKs0Wmxr7P0C7ws1U=
Subject key identifier: F9:B2:DF:2A:E0:6C:56:3D:91:61:34:D4:A4:5F:28:BF:58:0F:48:C9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849393E8BB99E66CB68FA058E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/964e4a18-25c8-36e1-8beb-645d7ee13fba.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 210805
IP address blocks: 2001:470:3a5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:8b:b9:9e:66:cb:68:fa:05:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=5477f4a7-9498-42bd-a785-113912be531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:4c:ce:4a:7b:d3:7a:77:02:21:75:91:c4:
7f:b8:a3:87:24:86:87:e4:74:f1:10:be:51:98:51:
8d:99:52:5c:c0:21:f2:44:1c:da:ca:5f:b6:74:94:
ac:d9:ef:1c:4d:da:8e:a3:56:cd:ae:9b:53:d8:a2:
d5:22:d1:2c:1f:5a:01:6f:59:1c:52:54:85:c1:cd:
d7:71:ee:b4:a0:39:58:c2:c6:71:51:97:cc:f3:f3:
a1:ec:e8:5b:e6:84:c9:55:7e:d3:1d:9e:5d:62:f8:
65:6a:47:dd:a0:5f:61:ea:78:b5:d8:67:23:05:d3:
fc:5d:33:95:a8:9c:31:77:b0:70:34:78:ea:95:4b:
f1:aa:f8:c1:f4:a7:f8:d6:7c:fd:16:43:41:1b:27:
42:f5:a4:a8:b1:b5:a9:be:82:d0:87:b4:4f:a6:ce:
98:ff:cc:6d:22:da:b1:73:33:6c:26:73:83:76:80:
e7:11:45:91:b3:4b:ad:6d:a7:a5:33:6e:19:83:49:
7c:cc:ac:75:b4:07:0a:c4:00:70:32:e9:f9:e6:19:
77:4e:22:97:2f:fc:eb:9e:e0:27:45:e5:84:49:f8:
af:c5:aa:f7:37:c5:48:2a:f6:1e:b6:24:6f:39:4f:
8f:4d:41:ee:c4:37:c9:c8:e0:bf:e6:c0:03:c5:63:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:DF:2A:E0:6C:56:3D:91:61:34:D4:A4:5F:28:BF:58:0F:48:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/964e4a18-25c8-36e1-8beb-645d7ee13fba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:a9:bd:e7:4d:00:2c:29:93:ea:45:96:55:49:8c:02:d6:2a:
b0:a3:b9:b0:ab:8c:5c:04:7d:7b:bc:7c:a9:7a:54:70:72:83:
ed:8f:d7:6c:9c:4c:02:3d:7a:f5:59:ca:3a:49:21:fe:ac:f1:
97:08:a2:e3:e5:db:db:13:de:08:a5:e4:e6:9c:00:6f:36:19:
8a:7b:69:00:0c:97:68:06:08:6a:df:b7:07:c2:27:f7:31:86:
89:c8:82:59:60:ec:b5:33:b5:11:2f:f9:2e:19:86:e0:50:30:
d0:a4:77:61:b4:70:65:0a:17:a8:bd:c9:52:f5:a7:3e:2c:fc:
db:8a:49:de:16:94:8a:b1:80:15:b5:9d:a0:b9:b3:cd:70:84:
51:72:55:61:c6:2c:ba:41:f7:cf:cb:fa:2c:e1:6f:6f:7a:d6:
4b:b6:fb:79:7e:79:8b:b7:be:07:6e:96:25:68:3d:0d:0d:ea:
22:fa:94:8c:b5:85:5c:e5:12:a2:a0:e0:1b:95:b7:7c:f8:9e:
80:42:73:42:77:3d:56:2a:52:98:c1:02:e5:f4:37:04:f5:40:
4a:80:77:9e:ad:8a:86:91:63:1f:35:0a:ba:10:f2:2d:58:3d:
35:95:ee:93:4f:42:13:f0:97:18:3f:f9:01:c8:d5:3a:45:5e:
78:f1:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:30 2025 by rpki-client