Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa
File: 9c012a43-a7f3-3901-85c6-fe671914ce92.roa (raw, json)
Hash identifier: dU77O9EjheyFxvMf+vcjGExqDAXrLVGUwgaUPa/AaYI=
Subject key identifier: F7:E3:6B:07:B6:D3:CA:27:65:E0:0B:F5:F5:68:7F:DA:C4:1D:5E:85
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926CE52A2132E7145532580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 396003
IP address blocks: 2001:470:289::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:ce:52:a2:13:2e:71:45:53:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=33975d1c-ec15-4bfb-aea5-3903c3713e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:29:d3:d0:b5:cc:cc:34:56:4b:6e:94:df:
ce:f4:25:c5:19:a0:06:af:e3:2a:3c:30:ec:60:a8:
ec:af:11:37:1a:b2:e9:b6:cd:e7:44:64:0e:54:f3:
63:ed:e6:ed:0e:47:4e:e3:de:17:fc:7d:4b:8c:6c:
c2:40:86:66:1e:a0:0d:82:ec:5e:0f:bd:ba:1a:2b:
fe:89:ad:06:5c:2d:f0:a6:6d:d7:03:58:7f:20:35:
fd:30:65:6c:49:6b:45:a1:55:62:67:77:6a:b1:4a:
38:5c:16:08:bb:dc:16:a1:4e:63:f3:e3:a4:a5:05:
f8:b6:57:35:59:9a:80:81:89:7f:f2:60:bc:1d:05:
93:41:2e:a0:c2:a3:cc:17:1c:13:90:02:0b:45:3e:
74:a9:53:b7:cd:8d:a0:53:29:d2:00:97:8e:5c:6f:
10:88:5f:09:0a:19:dd:34:75:59:05:77:9c:1d:a3:
01:ec:9d:13:20:75:0c:1e:6e:c9:57:74:11:e8:04:
08:ed:86:ed:e2:ab:a4:44:bb:6d:b9:90:18:fb:03:
64:31:36:af:28:89:5f:5d:c7:69:16:3c:7b:1c:b3:
b3:60:9b:2f:f1:f2:52:1b:91:5d:d9:68:ad:71:cb:
83:ef:e3:5a:5b:8d:24:ce:3a:1b:54:e3:72:86:c3:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E3:6B:07:B6:D3:CA:27:65:E0:0B:F5:F5:68:7F:DA:C4:1D:5E:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:289::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:be:fa:cc:37:27:97:9b:0a:f0:61:97:69:fe:33:a2:1b:fb:
7a:02:e6:fa:7a:17:09:7b:43:a0:76:0b:d8:b3:22:c9:2c:4c:
74:9f:e6:55:03:cd:b6:c3:77:80:85:4b:d4:6e:a1:6e:3c:31:
7e:47:ca:e0:8c:23:a2:46:7f:aa:97:7e:14:7e:e6:24:f4:67:
b5:a2:ea:c5:1b:1f:86:05:42:03:4f:5e:22:6e:3e:e3:a0:68:
cc:a4:8c:91:4d:ba:3b:e4:9c:1b:1a:03:d6:fc:6e:4f:85:70:
e7:af:b7:97:8c:e1:37:9d:c0:e5:83:de:bc:2c:bf:2c:59:74:
45:c9:9e:77:a2:bd:e2:18:84:e5:64:d6:a8:97:7d:af:40:10:
60:f6:00:66:97:ca:13:29:91:c5:d5:30:21:15:69:89:45:0c:
a9:c8:23:45:78:cf:29:96:74:78:bf:58:e9:d7:e8:48:2e:ab:
33:e6:27:56:a4:18:dd:80:74:9f:70:09:ef:80:c1:b6:2e:19:
4a:5d:37:44:f6:20:7f:4f:a2:7f:62:46:0a:3e:e8:1a:d0:80:
e7:99:e2:9b:2d:cc:e0:09:72:8f:97:b2:15:1e:89:25:b5:05:
00:46:3f:bf:a7:4a:18:e5:7b:58:52:c4:6f:66:71:e6:2d:2c:
14:f3:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:46 2025 by rpki-client