Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa
File: 9fcb47e4-2631-3189-b033-c457218cf93c.roa (raw, json)
Hash identifier: k1nptlSEnYn5j1Mfs7pLeWViraLUo3OHC8cqfMWxjbg=
Subject key identifier: 30:AB:89:79:C5:1B:9F:1D:95:4B:DD:5B:8B:C3:81:52:BC:7D:AA:0C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D002A956FA75A8A1D640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 10737
IP address blocks: 2001:470:2d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d0:02:a9:56:fa:75:a8:a1:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=087932cd-6f3a-4fd2-af9d-2b13e6e14648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:8e:4a:67:48:c3:41:80:15:44:b6:2c:ef:
b2:9e:70:c4:e2:0b:5a:e7:54:82:45:77:3a:b2:ac:
3e:f8:b9:b1:38:62:5c:7b:12:5d:70:55:a8:96:2e:
d7:ac:e1:65:8d:b6:e3:b4:18:3d:9c:64:16:3e:19:
f2:ef:9f:c5:21:79:2c:5d:24:65:9c:1e:80:fd:d8:
60:37:3c:13:4a:12:69:3f:c4:8e:ff:af:30:9c:05:
dd:ac:d0:d3:48:d1:01:b8:1a:f9:d4:6e:76:05:a8:
11:c3:8a:e8:ce:46:bd:65:ef:da:95:1e:85:7f:6b:
23:49:3b:ad:8a:15:5a:d1:3d:84:34:a4:94:0b:43:
14:db:c5:12:ff:d3:a1:be:15:24:27:cb:05:35:88:
8d:a1:6d:20:30:a1:cf:64:60:75:f0:78:65:c0:6a:
0f:30:dd:2f:62:77:0e:ea:00:4d:d8:6c:38:45:69:
b8:3b:5b:4e:77:11:22:c7:56:c1:7e:38:ba:29:ee:
21:3a:86:7e:7c:11:30:8b:01:01:46:ed:4a:98:52:
bc:39:6f:cb:76:71:42:d7:60:55:d1:e7:2e:91:9d:
c7:be:f5:7a:da:95:fa:94:f4:ef:fd:d8:42:58:b5:
08:46:2d:25:ce:20:97:04:e2:0a:d6:68:fe:a6:f2:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AB:89:79:C5:1B:9F:1D:95:4B:DD:5B:8B:C3:81:52:BC:7D:AA:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2d1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:7b:26:96:04:a0:13:f1:90:24:55:c4:51:5d:58:b7:b6:4d:
d7:62:f2:f8:5f:bb:4a:29:04:83:c3:25:05:74:b9:43:30:e9:
1a:83:10:d9:26:21:3d:16:b6:ff:8a:0a:fd:86:78:70:b8:12:
02:84:7b:7f:e7:ca:ff:fd:44:30:00:b0:56:b9:46:c8:6e:b5:
1f:9d:49:ce:cb:36:65:e3:e5:5b:32:ac:22:be:13:d1:b9:63:
29:53:ed:34:26:32:0c:6e:fa:89:18:9d:33:27:4e:2b:20:90:
d7:36:28:5e:e0:a1:a7:00:cf:95:d9:6b:5a:92:bd:97:a1:29:
28:e2:5c:bb:be:9d:a3:16:7a:0d:98:01:1f:a5:46:f3:8f:d6:
96:24:bb:3b:d5:41:74:83:de:1f:21:24:ca:28:1f:91:a7:14:
26:99:c3:78:92:2c:69:f8:6d:fb:48:df:ca:46:b6:f5:a4:92:
d4:22:0b:1d:1d:d0:ee:c7:09:4f:68:e9:b2:f9:d1:00:15:b1:
53:28:b5:62:b1:eb:ce:0d:cf:8c:21:b8:31:8d:1a:b6:3b:91:
19:45:a7:be:fe:67:a0:49:cb:e8:a7:84:88:c8:c8:fc:a5:a5:
06:5e:82:6c:4f:fc:e4:fa:37:56:13:c6:c6:f5:82:06:ba:39:
aa:08:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:52 2025 by rpki-client