Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa
File: a9a48928-2461-3b39-a10f-1672d3db066b.roa (raw, json)
Hash identifier: 0q17x3jnNxivUAdltCCNYri1huj13+z2H7wgBmPOlE8=
Subject key identifier: CB:CC:9C:AA:49:E6:38:89:BB:C3:96:88:AC:CA:97:B5:EA:38:C8:C6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858494039805047F5CCA98289D080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 396354
IP address blocks: 2001:470:33f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:80:50:47:f5:cc:a9:82:89:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=5b087cd2-a4d8-4098-8d12-f86b6d7519f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:0d:0c:2f:85:34:5a:19:14:1b:a1:65:4e:
ca:3d:77:46:c5:7d:de:17:4e:4e:f5:40:b4:8b:a1:
fd:6c:d8:80:5b:a7:51:4d:46:04:6c:66:d8:2f:24:
cd:d5:63:97:4f:3d:d5:b7:e5:dd:9c:df:8c:b1:3d:
69:a5:35:7b:63:7a:1b:61:79:74:82:87:5f:9b:c8:
3c:9f:ab:45:63:d3:c6:93:5b:89:67:69:53:b0:fa:
a3:f5:ed:b0:25:31:b4:0c:4b:18:3b:fa:b6:29:64:
3e:02:cf:f1:6f:ee:f2:d6:02:da:73:7e:61:d9:3b:
84:4a:fb:f1:67:4b:5c:31:87:84:9b:ea:b5:0d:b1:
9d:96:cf:c1:ac:93:a9:c2:1b:6c:28:51:b7:0b:40:
4e:73:1b:ff:32:95:c3:db:fb:41:c9:f1:0e:cd:e0:
10:d7:db:cb:ee:19:c0:93:03:e2:8d:34:de:51:ab:
c6:79:a7:02:ca:a6:c7:64:2e:5e:86:95:58:c7:16:
59:37:14:f3:bb:fa:7a:6e:43:42:cc:38:1a:1d:f4:
1d:e9:d7:31:fa:e6:7e:2c:fb:8c:4b:30:ce:95:df:
2a:c1:25:c0:63:55:9c:13:56:3f:18:c8:5a:a7:b0:
7e:0f:e7:6c:91:3f:7e:96:9d:16:62:99:bf:f1:2c:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CC:9C:AA:49:E6:38:89:BB:C3:96:88:AC:CA:97:B5:EA:38:C8:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:33f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:9e:3c:ba:6a:03:ab:33:0c:eb:d7:c3:2b:6f:b1:83:ea:8f:
32:61:14:31:b8:a3:07:9b:09:3f:2a:d4:51:f0:3d:eb:d3:d3:
c5:43:4c:5a:e3:4e:fb:5d:34:b6:e4:7b:f4:22:f5:ff:7f:cd:
36:46:6a:ab:cb:af:15:c8:92:b4:46:d8:22:76:74:ea:f8:4c:
ec:1c:b5:02:c2:40:f8:14:72:f3:7d:ed:e3:b5:df:7b:f9:f5:
49:c5:b0:2e:46:8a:e8:99:bb:5f:81:4d:be:06:00:93:ab:a3:
8a:c6:06:8c:68:77:f9:fa:ab:dc:e4:93:b9:3b:dd:29:54:24:
51:b3:a9:1e:f2:b9:92:c0:a1:1e:cc:35:14:9d:53:86:b3:3e:
9d:f5:95:2f:45:66:45:99:82:44:1b:f9:7f:dd:ea:c4:d1:8e:
93:5f:b5:51:b9:82:f3:03:2b:13:3b:2c:83:db:a6:76:0e:ea:
ab:72:93:e6:36:7c:47:30:97:94:59:41:d0:c5:46:c0:ea:f2:
7f:c8:11:e2:a2:f1:9d:c3:dd:05:d8:7b:04:39:4c:6f:79:3a:
14:8e:2b:5f:f5:83:f2:4d:3b:66:cc:fe:c7:84:46:c2:46:a4:
8e:76:ef:0d:26:26:1c:d3:e5:9f:39:0c:c7:26:22:1a:dc:a3:
26:ab:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:45:15 2025 by rpki-client