Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa
File: a0a5fafb-9602-388d-b21b-0ba4f6937692.roa (raw, json)
Hash identifier: tUZUa4buibZWVG/FvrMLilniqdvdAOqQyFY3iaf9uhw=
Subject key identifier: B8:DB:10:46:45:00:90:C3:2C:3A:38:04:64:21:A4:3F:7A:F9:A2:B6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858490F8A9B06583AC82A9E89BB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa
Signing time: Mon 03 Mar 2025 02:30:13 +0000
ROA not before: Mon 03 Mar 2025 02:30:13 +0000
ROA not after: Sun 01 Jun 2025 01:30:13 +0000
asID: 18821
IP address blocks: 2001:470:3a7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:8a:9b:06:58:3a:c8:2a:9e:89:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 3 02:30:13 2025 GMT
Not After : Jun 1 01:30:13 2025 GMT
Subject: CN=a8b01503-e4cd-4e40-96ca-0e23e3bac4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:8b:a7:00:fe:77:e1:ba:cb:f7:ec:71:8b:
9c:dd:69:6e:03:d4:46:49:1a:85:f7:7a:45:c8:7b:
88:4d:b5:59:9c:d7:41:a1:f0:2e:fb:69:33:e9:ad:
9e:58:b5:87:f2:4c:06:d6:49:d3:d4:60:4c:7b:e9:
b9:61:18:99:8e:68:61:53:f8:5f:4f:2c:1a:e3:83:
8a:0f:cc:9c:64:00:0e:80:45:f0:f9:0c:55:1d:cb:
d8:32:0e:14:a6:6f:24:46:15:71:fa:e0:2f:d5:e6:
52:8e:ac:ee:4b:7c:65:29:ca:41:d8:03:91:7f:43:
b3:06:69:25:28:4e:a5:c1:7b:73:11:7a:f2:72:72:
df:34:9b:b1:98:11:1a:7c:41:c4:30:b0:12:7a:1a:
89:17:37:85:3f:9f:79:87:29:f5:0e:33:2c:75:01:
73:ca:25:d5:df:93:19:a8:a3:df:6e:64:da:37:87:
70:48:67:48:53:7c:5a:98:51:75:36:05:0a:d3:bb:
0c:82:bc:86:5e:d2:5e:a1:1b:b3:c4:d7:7e:31:c5:
ed:6a:b9:a3:6a:b4:3c:4f:1f:b3:27:69:91:cb:d6:
5a:22:88:4d:dd:bd:90:3a:af:d7:be:10:e7:b0:3e:
b3:77:e0:79:21:ac:5f:2e:76:3d:98:7d:c7:a3:48:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:10:46:45:00:90:C3:2C:3A:38:04:64:21:A4:3F:7A:F9:A2:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:69:10:ed:5b:76:39:91:b6:f4:43:89:7b:51:de:ff:ba:ea:
94:61:dd:20:1f:3e:47:c6:62:df:dc:bf:4d:8a:57:2b:25:fd:
89:2f:4f:e6:b7:13:ab:3e:80:c1:31:45:04:87:7d:ea:f7:af:
9a:8d:bb:ba:57:a1:00:85:3e:18:69:41:ca:49:1c:9b:a5:e4:
68:56:dc:5a:3e:9f:41:9d:ca:41:23:dc:a0:33:34:81:ba:d9:
50:3f:e3:fc:49:d6:b7:a1:2b:dd:a5:c6:88:a2:01:6c:d8:d3:
8a:7c:3c:ec:ac:60:bb:e8:4c:3c:58:3b:3d:46:aa:59:3d:e5:
6d:31:06:e2:63:85:5a:92:d5:68:d5:56:75:97:19:5c:b4:98:
89:ab:19:a2:40:c3:cb:c3:f9:ea:7d:37:3d:cb:8f:1a:30:2a:
86:f7:59:b1:26:7f:41:08:65:7b:42:0c:f8:cb:f5:8f:c5:75:
30:f5:03:9d:54:e3:31:02:19:b7:5e:44:59:25:db:e1:48:14:
17:9b:3f:17:34:92:5d:10:69:bc:2e:5b:57:25:bb:2e:3a:b0:
6e:49:cf:8b:5d:55:bb:a0:dd:59:26:92:3f:38:92:e2:69:9c:
b6:0a:7c:d8:5a:a1:51:1b:ed:56:78:76:22:09:f5:0b:67:76:
32:bd:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:45 2025 by rpki-client