Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa
File: c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa (raw, json)
Hash identifier: bkorFIQarOule7kkbqe51okXXJ0b1YlWFY7yckwTBEo=
Subject key identifier: 79:99:25:E2:BC:C1:CA:FD:E6:46:16:20:B5:20:D6:B9:B7:60:FD:D8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C65995A799D7F0525A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 394256
IP address blocks: 2001:470:1bf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c6:59:95:a7:99:d7:f0:52:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=cbd16421-30eb-461b-a477-a0dae37f4ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:8f:14:38:2b:e4:f2:44:66:b3:eb:04:56:
9f:3d:e6:3a:6c:a7:3e:e7:d2:f5:65:68:f7:8b:85:
6e:3b:0d:44:3e:59:af:50:e5:06:37:fb:74:7d:9c:
99:38:3f:5d:0c:49:99:1e:59:ec:32:b1:c7:72:fc:
44:bf:31:64:f8:62:11:71:41:36:9a:54:0c:7e:10:
ff:b5:d3:0f:72:94:d2:aa:4f:e8:c3:a0:50:5f:2e:
a3:d9:e1:87:89:c9:62:0f:da:8e:6b:4d:c0:5f:56:
ae:c5:a1:e3:5d:8b:d7:62:77:b6:89:56:11:a7:ed:
3e:52:79:f2:87:fa:53:0b:6c:fd:77:c6:bb:78:a5:
f3:3b:ea:49:74:54:f3:e1:22:48:77:39:09:20:cc:
34:4a:76:ae:d1:87:b4:a1:75:0a:90:a4:25:7c:41:
54:07:cc:69:a9:87:01:6c:22:ac:23:ff:94:96:26:
58:c0:17:3c:f0:a1:8d:6b:c4:f7:ab:60:7d:49:af:
67:5b:5d:f2:04:a6:0c:f4:b1:86:36:68:b9:c2:50:
7b:7b:f2:70:60:99:c8:b8:71:ac:ff:7a:8b:41:07:
b8:96:9b:a8:f4:2f:f6:46:91:48:a9:f4:fc:69:f8:
a0:25:94:47:f1:ed:e6:e6:82:c7:df:ae:0f:92:14:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:25:E2:BC:C1:CA:FD:E6:46:16:20:B5:20:D6:B9:B7:60:FD:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1bf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c9:68:00:f1:37:dc:df:ed:4c:87:7a:1f:16:b1:cb:a0:97:
83:e6:d5:08:5a:43:ff:37:26:69:4a:11:61:c5:bb:84:58:1e:
36:13:75:0e:c5:0e:3a:d2:fb:ce:f6:31:50:3c:88:b7:c7:54:
5b:aa:d4:7e:0a:40:db:1c:32:30:cb:61:8f:b8:b5:8a:5b:fb:
03:b0:ca:18:91:99:6a:9d:55:0d:1a:62:54:15:17:83:b7:52:
a6:64:4c:1b:4c:99:2b:9d:2d:ba:f2:c6:10:9a:6a:5f:24:a4:
34:1a:f2:73:77:79:23:86:7b:eb:62:28:3a:67:16:ad:7a:d9:
9a:5f:a9:4a:83:0e:c1:e0:f7:b9:46:a5:bf:fd:8a:99:db:24:
a7:7f:92:be:5a:bd:39:2e:8f:79:dd:50:7b:4a:8b:30:75:3f:
c2:df:9d:79:20:c5:a7:e7:da:bc:0a:69:81:b1:51:55:2c:e4:
0c:e3:c1:82:42:81:e4:d2:f6:0b:60:94:67:46:55:f5:34:d5:
9b:ca:3c:db:c7:84:56:be:7c:d5:59:59:27:2a:07:88:7c:82:
d5:5a:66:27:4b:c6:38:68:ac:b0:6c:00:81:bb:5f:37:ed:36:
45:a3:8a:1d:da:0e:1b:e4:e1:4b:97:3f:73:b0:4f:dd:65:d8:
c6:1c:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:24 2025 by rpki-client