Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa
File: acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa (raw, json)
Hash identifier: Ru+AgkXVaUX02JRAGqrv7xm3/dGZAvod1Zn5tgsfIuw=
Subject key identifier: 69:25:F4:93:52:6B:51:8C:03:BC:27:D4:0D:D7:70:45:F9:8A:88:21
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C6705D1D358BF33B3080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 8057
IP address blocks: 2001:470:1c2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c6:70:5d:1d:35:8b:f3:3b:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=2001846c-61fc-483d-9b94-83a5ff1af2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:7b:96:c1:5d:c9:62:a8:94:9b:03:4c:f4:
5d:68:cc:80:d1:56:0a:51:fb:53:59:58:30:d9:b5:
0d:b7:eb:4e:e0:41:1f:b1:3e:a7:2c:2c:29:6b:8d:
97:88:21:d4:93:2c:da:4b:ba:e1:de:b3:19:49:31:
aa:b2:e7:0d:78:36:51:11:93:59:6a:f0:f8:30:41:
21:a8:12:45:6a:2f:c5:d9:4e:17:43:bd:a8:26:4b:
41:a5:88:c6:af:21:36:e1:c3:3f:06:43:2b:50:1e:
2e:32:f4:99:0f:b1:1e:c2:31:24:e2:59:d5:3b:33:
00:58:e4:78:6a:c6:4e:4b:50:99:70:0c:80:ea:4d:
1e:02:16:41:e4:55:f5:8c:94:9a:ec:66:7e:10:72:
dd:67:e8:79:31:96:ed:34:06:e8:45:6e:65:a1:5e:
a0:66:9b:7d:0d:fe:3e:be:0e:4d:82:bf:98:e7:07:
bc:aa:11:51:e0:31:cf:82:6c:90:9a:c2:4e:be:3d:
89:5d:58:e0:e5:fb:c3:e7:88:6c:37:6a:31:6d:1a:
08:b8:53:bc:fb:44:19:00:7c:9b:06:4c:df:a4:30:
59:b5:af:77:cc:34:4d:bf:1d:cc:41:4d:e3:34:65:
ec:8f:80:bb:34:76:bb:e0:18:69:b3:f4:40:35:4b:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:F4:93:52:6B:51:8C:03:BC:27:D4:0D:D7:70:45:F9:8A:88:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:48:ca:7c:51:4e:37:33:7e:1c:43:59:e2:12:cc:2c:15:d5:
c3:6e:76:e9:f3:b9:0d:7b:c6:1d:c2:19:40:45:23:8f:39:4c:
e0:00:cb:c0:14:44:3b:9f:65:52:de:0f:4b:12:da:1a:10:36:
4d:b8:e3:b5:5a:ec:8a:35:c8:08:a3:d8:ad:57:bf:68:e5:d5:
2b:40:1f:09:7d:f3:dd:88:78:ca:59:7b:d7:a2:05:b3:28:32:
82:86:ce:e9:df:4d:69:f4:fb:69:1f:73:47:21:d0:58:9e:1e:
da:a8:25:5f:6b:b4:51:f7:02:a5:10:4e:3d:8f:a7:ee:02:f7:
41:49:fb:56:eb:57:4b:be:53:60:e2:3d:ff:76:a0:db:67:64:
02:04:90:a2:58:cb:21:94:f1:1f:1c:2d:67:9c:4b:35:6d:76:
12:51:51:da:61:c4:3b:fe:0c:27:d8:ad:cd:53:df:22:b2:7a:
ff:b0:19:f7:a4:4e:9a:ea:71:51:ce:83:4c:80:b1:10:e3:36:
ab:eb:f3:31:df:a2:78:cf:45:86:cc:3d:b3:e8:7d:76:9f:a9:
c9:c0:c9:23:ea:a6:26:1b:54:8b:ee:5d:c1:87:31:49:9f:5b:
70:dd:f9:ec:f3:83:d4:57:ef:90:ea:67:2d:95:52:9e:09:e4:
a5:47:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:35 2025 by rpki-client