Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd241593-b7b5-32c8-9de4-2dee6ae2713b.roa
File: cd241593-b7b5-32c8-9de4-2dee6ae2713b.roa (raw, json)
Hash identifier: YlKeaFTfNuW4+9vZgX/5iSgx7blwEz6k4nC+nlFlVOk=
Subject key identifier: 9D:47:A2:B9:25:6C:E6:57:62:5D:28:40:BB:04:A2:A0:19:55:59:7D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BBF4671CDFC41CE70DA8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd241593-b7b5-32c8-9de4-2dee6ae2713b.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 46886
IP address blocks: 2001:470:3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:bb:f4:67:1c:df:c4:1c:e7:0d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=30828500-6f01-49d3-bdf0-dd28620d6739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1e:44:5a:64:da:ec:ba:b2:6b:b3:36:27:a1:
49:e1:d0:4b:45:c7:1e:27:15:4e:ef:46:70:fb:7b:
30:3a:7e:ea:63:1f:e4:be:7c:63:0e:33:e1:62:94:
3c:14:ad:95:10:55:d0:3c:95:33:87:e2:54:37:1a:
d8:1c:f9:98:4c:c9:78:3f:88:c9:a9:b1:47:21:42:
7a:b4:15:46:54:5a:c3:18:ca:ed:0f:be:05:91:f9:
47:47:72:2a:b3:4f:65:40:31:39:a6:87:f1:13:9e:
90:cc:ed:5d:34:a2:88:83:ea:a4:1d:90:34:c1:1b:
79:0a:62:43:03:84:4a:59:cb:ab:55:d0:38:b1:ef:
67:c8:8e:ad:d5:8c:dc:24:0d:63:7c:ad:ef:9e:c4:
df:57:8d:32:0e:9c:15:9e:d7:c2:98:aa:e9:ce:c7:
dd:71:19:e2:6a:7b:f7:97:8f:9c:8c:92:54:1a:ff:
7a:ed:17:83:1d:4e:58:8d:82:e1:2c:e1:f9:27:fe:
d8:2e:eb:ea:90:7a:bc:85:21:1a:fb:dc:2e:99:3b:
b8:bc:ec:1d:15:ac:43:aa:f3:54:fb:6c:a3:32:f2:
ca:1a:b5:2d:ab:26:60:d2:2c:94:8d:75:fd:8d:95:
2e:35:4f:cf:67:51:53:1e:a4:cc:9f:5d:7b:ab:db:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:47:A2:B9:25:6C:E6:57:62:5D:28:40:BB:04:A2:A0:19:55:59:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd241593-b7b5-32c8-9de4-2dee6ae2713b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:41:39:6c:6f:5b:8d:6f:a1:fc:01:29:cf:fd:e6:ec:2b:a9:
e7:ba:b4:a3:db:76:1d:45:c0:2b:55:e1:a8:4a:79:94:2d:ef:
b7:d1:56:1c:9b:41:b7:a6:70:cd:c8:ba:ec:1e:6a:f5:cb:b4:
0a:98:24:a3:64:a2:af:ac:fe:36:2b:4b:c6:87:a4:2f:7f:b1:
29:c5:7f:b8:71:76:31:11:7f:88:f0:1b:3b:f0:45:9e:17:7f:
e4:9b:a9:79:cc:8c:5e:bd:e4:75:4c:91:4e:81:73:7a:c4:d4:
0d:c3:94:dd:30:b4:e6:59:fe:f6:7e:26:0f:f1:f9:8c:26:43:
fc:a3:66:84:be:89:b5:b0:68:2b:63:6b:df:8b:30:fe:b3:e9:
e7:5a:3b:64:b6:01:fe:b5:ff:54:b1:c1:d1:00:6a:db:92:d4:
92:34:58:ca:76:d6:6e:6b:08:81:ca:15:4e:87:05:2b:ca:25:
07:00:4e:95:38:91:a2:ad:55:36:f7:6a:a7:b9:9a:4a:70:4b:
20:d6:8e:e7:78:21:62:2d:b1:76:cb:fa:d8:ac:9a:ec:4e:4d:
bd:0c:1c:52:3d:9f:7b:71:81:db:9b:f1:42:be:06:a2:41:67:
4f:05:08:b2:d0:c6:c6:5b:9d:74:24:c3:09:9a:be:b1:af:a5:
3a:fb:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:45 2025 by rpki-client