Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf05c7f9-cf75-3be1-985a-0334d3985d70.roa
File: bf05c7f9-cf75-3be1-985a-0334d3985d70.roa (raw, json)
Hash identifier: 2u3btP/2LsFLHtyB27B7YNoMDqjfj2oyGm6qBb/Z0xw=
Subject key identifier: CA:48:F7:08:16:2E:A3:06:2B:46:9B:A1:A1:12:B4:3D:B9:40:53:31
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E31817F23FE4A622E400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf05c7f9-cf75-3be1-985a-0334d3985d70.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 44411
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e3:18:17:f2:3f:e4:a6:22:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=c278101a-9d42-4906-ac4a-9ba31e6b233b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:44:0b:4a:27:53:01:6a:44:e2:53:b5:f7:
d5:8c:5c:d4:45:87:e1:20:36:07:b6:a8:57:27:1f:
e0:83:d7:75:63:e1:9d:32:33:d9:97:bb:0f:fa:aa:
59:e1:b1:80:7f:1b:5b:a2:35:f4:34:34:85:13:55:
89:9f:2f:a7:2d:d7:9e:e3:8b:32:c3:8d:33:90:57:
72:1b:b8:2c:60:e6:f5:6b:e5:1b:e6:23:5d:37:79:
63:5d:f4:50:28:5b:ee:a5:0e:96:5d:1e:c7:6b:e9:
d6:70:25:03:b6:9d:64:29:56:f2:f3:57:b3:0e:18:
22:6b:08:59:a3:7f:1a:ad:fd:de:ad:cf:bf:ea:85:
d2:ae:b1:04:cc:27:e0:b9:2c:f0:6d:ed:2d:f6:78:
07:8f:46:80:d2:0e:a5:85:52:d0:f2:20:60:b9:87:
de:39:b8:97:72:e4:c6:60:0b:60:7f:2c:62:ec:44:
6a:fd:26:ce:bc:93:13:e2:b5:41:26:73:b4:a7:7e:
f9:1d:71:ab:8f:18:24:05:1d:75:7a:83:a2:50:82:
80:d7:a6:93:7d:01:6a:0d:32:7d:d9:5d:28:4e:b5:
65:10:0e:18:1e:f7:1f:20:b3:bc:bf:4a:20:e1:1b:
4d:fa:12:0e:20:b7:70:9f:07:d9:e6:25:b7:85:d5:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:48:F7:08:16:2E:A3:06:2B:46:9B:A1:A1:12:B4:3D:B9:40:53:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf05c7f9-cf75-3be1-985a-0334d3985d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a7:50:76:88:d1:ff:2f:11:20:ce:e3:2b:50:57:c1:b2:cf:
88:86:63:99:b2:84:2f:a8:33:60:de:9d:f0:ac:ce:d1:e6:4a:
2b:11:ee:4a:ed:ca:73:a7:47:a2:62:3d:77:95:97:7c:49:76:
b6:39:92:3a:db:6c:1f:3f:fb:44:e8:56:b9:e2:8d:89:56:1a:
cb:18:47:14:43:2e:6a:e1:ff:28:cc:e7:a6:3c:4f:3d:1c:33:
5e:ed:66:7b:9e:69:01:07:db:58:61:98:96:84:1e:f7:c8:2e:
3e:69:89:e4:8b:76:4b:37:fb:37:3e:01:76:22:25:45:3f:b4:
bc:80:0e:49:50:6c:d1:7d:d3:e8:1a:d9:c0:80:b2:34:7d:3a:
f5:fa:a9:a3:fa:0d:3c:1e:e4:35:59:5e:fb:48:21:f7:8b:d8:
0e:67:dd:e8:ac:ed:94:49:5c:34:29:d3:66:90:19:00:52:ae:
15:9a:4f:26:9f:d4:5a:3d:db:27:0d:ce:ff:aa:e2:cb:7f:9d:
09:1d:cf:7c:53:60:43:5f:09:6c:a3:03:a0:f6:33:b4:9a:d3:
b2:59:bb:0c:d4:3c:5c:0f:8a:b9:e7:11:bd:1e:85:5c:6d:d5:
4a:49:78:89:bb:62:92:65:0c:5d:70:99:2d:9b:2d:47:cf:f9:
d8:7f:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:00 2025 by rpki-client