Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2710d99-a1a0-3cf1-ae7f-b206973086d9.roa
File: a2710d99-a1a0-3cf1-ae7f-b206973086d9.roa (raw, json)
Hash identifier: sRnPlpGoyadHFVdDsbxU4vidrSzYq0hyj1g72WehoJo=
Subject key identifier: 99:EC:69:C7:0E:67:F6:F9:C2:7B:2B:A4:B3:B8:DC:93:77:84:80:24
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DE7792EF2A48EC61B300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2710d99-a1a0-3cf1-ae7f-b206973086d9.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 19256
IP address blocks: 2001:470:1cb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:de:77:92:ef:2a:48:ec:61:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=8a3a605f-d8c6-4c14-9940-2be20b4003d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:ff:c6:24:b8:21:9a:fa:47:90:86:03:c2:
7d:87:24:a8:97:74:5a:fd:00:10:3d:a1:d7:b2:87:
3d:12:92:b6:ad:40:58:58:29:b4:43:7d:0f:06:59:
1c:90:7a:89:4a:50:ae:33:d4:3a:0c:88:4a:37:4e:
67:6c:b6:e9:1f:a7:db:8e:df:5a:a2:58:a0:b2:d8:
e6:5d:eb:8a:07:32:5a:20:d6:24:75:f9:67:e7:84:
aa:14:47:43:01:55:5d:4d:56:01:d2:1a:39:9d:40:
10:d0:7c:72:b6:16:ae:ce:ff:85:3a:80:8e:fa:c0:
97:b4:f4:30:73:c6:d4:d6:be:b6:39:1e:5e:ad:bb:
8e:5f:66:3e:03:58:6c:a5:f7:68:02:eb:2b:3d:0a:
19:c9:4d:70:2b:38:08:e7:fb:f3:39:2d:96:40:d3:
eb:b6:8d:78:54:7c:5d:7e:34:c0:8d:2c:96:06:a6:
35:33:83:16:9e:87:e2:5e:aa:28:3c:2f:bd:c2:5f:
34:1c:70:be:da:d9:58:57:a1:62:8f:52:d2:16:9f:
d6:66:18:07:5e:74:9f:bb:21:68:c2:70:74:45:83:
e4:ab:bb:6f:ad:bb:bc:2c:3c:0b:25:8e:0c:de:c6:
fa:29:e7:7b:50:79:4a:f6:d1:1b:ed:f1:9b:ae:75:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:69:C7:0E:67:F6:F9:C2:7B:2B:A4:B3:B8:DC:93:77:84:80:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2710d99-a1a0-3cf1-ae7f-b206973086d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1cb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:ba:3e:5c:73:dc:6a:3a:6f:1b:28:a2:70:1e:8b:2c:22:64:
74:05:79:14:4d:fc:e7:41:66:4a:e6:82:1c:13:2e:38:2f:ff:
d5:46:26:b2:60:18:22:b4:4e:91:94:6b:fc:1d:a1:32:c6:f4:
70:7a:fe:08:dc:e3:3c:21:0b:d4:76:10:78:59:8a:83:3f:58:
06:b0:1a:18:26:b4:a3:d6:06:dd:f2:06:73:0d:cb:72:9e:35:
d5:75:50:1d:22:65:23:ca:30:2c:67:af:6f:c4:22:61:ad:b3:
7c:c6:fa:45:c2:90:72:12:f9:52:4b:87:e7:c6:6e:92:42:38:
13:54:0d:22:d8:2f:20:23:16:e7:a8:6f:43:b5:08:12:2b:77:
83:de:c1:ae:31:a1:9b:18:e9:31:f2:ac:a2:e6:1f:04:b1:6a:
02:49:b9:a0:bb:fc:4a:93:dd:b7:4c:2d:8b:8d:22:c4:55:34:
4f:88:51:97:d4:20:5c:82:6d:27:80:6c:f5:8b:5a:9e:13:ea:
fd:3b:29:ef:ac:ab:3f:95:be:dd:19:1e:17:20:d4:73:91:e2:
bf:d0:9c:7f:aa:cb:2e:94:0d:ed:96:be:f1:d2:a9:2f:61:6e:
5c:d8:b6:00:de:e7:85:d4:ae:a1:41:67:a6:66:d4:70:d9:6b:
b4:ef:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:00 2025 by rpki-client