Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa
File: cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa (raw, json)
Hash identifier: 21+A6C59MgAY7TPs3Ava2IDXDtCa6xniXClKCV7g/ac=
Subject key identifier: 67:9F:0C:F5:78:1C:9B:88:09:1E:1E:84:31:77:66:FA:0C:06:6F:F2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C0D3C88ABE2180E47480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 393737
IP address blocks: 2001:470:d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c0:d3:c8:8a:be:21:80:e4:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=1c9ba3af-e0a7-41fb-a8e8-59a3faba2b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:21:e3:c4:98:17:d3:57:d6:81:84:71:48:
09:96:e3:52:e2:ce:ee:92:f5:6d:62:a0:f5:96:ac:
5d:26:31:9f:55:22:96:ef:53:37:f4:4d:a0:f9:20:
c7:8e:83:2c:97:5a:dc:f7:45:38:38:80:3e:e3:2a:
f0:d6:25:d2:79:0a:d2:b7:e6:fd:85:f2:84:2f:1f:
c2:3a:0e:68:76:d2:a9:d1:3e:c3:55:0a:8d:5d:ae:
96:7f:c6:71:07:4b:16:93:a1:fe:a2:5f:50:7a:c4:
06:bc:23:7a:6f:e8:ce:5c:76:0f:38:70:05:7b:47:
41:08:e1:b3:53:13:35:b6:20:eb:b8:fd:cf:e3:5e:
31:e9:9d:86:45:a6:6f:ad:43:15:fc:61:da:86:5b:
a3:39:35:c3:8e:ea:ac:dd:5d:45:46:29:ca:52:28:
eb:24:58:a8:99:28:33:50:73:49:e9:e1:ea:56:b1:
64:49:d6:90:74:c4:a5:f3:eb:5f:7f:1a:44:35:5f:
43:7e:d0:f8:db:38:d0:9d:e0:c1:1d:f5:cb:7c:8a:
c6:2d:a7:e5:d9:a8:00:8c:8c:ce:a5:1c:9a:63:bb:
e9:ac:a5:e6:59:89:22:89:47:5e:f5:42:c3:01:05:
8b:c7:50:87:a3:92:65:8f:07:96:55:61:7a:93:6e:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9F:0C:F5:78:1C:9B:88:09:1E:1E:84:31:77:66:FA:0C:06:6F:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:d1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:8a:84:d6:2c:f6:7c:12:8d:fe:a9:20:e8:3e:2b:b5:2a:d5:
59:2f:1a:5c:b9:92:84:18:4a:5f:40:33:ba:5f:d6:c8:9b:58:
91:39:ed:42:69:c4:7b:6e:8e:cd:32:13:9e:d8:e5:cf:b4:4e:
8e:5d:75:2d:93:d6:4f:89:ab:a4:11:27:c8:05:ba:9b:51:56:
0c:f6:0d:68:1b:a9:3a:6c:b3:f3:f8:21:33:6f:8d:40:c5:a3:
00:87:04:d3:b2:c5:17:3d:47:c0:27:96:79:8c:25:0d:1c:0d:
35:ed:26:9c:5e:a8:47:94:74:ac:34:2b:94:a8:a0:80:38:bc:
20:ca:d6:bd:bf:8c:74:de:c0:f4:a0:c1:1f:6b:66:ab:13:65:
08:20:09:f8:f2:36:c9:e7:b3:df:cb:1b:b2:0f:73:a8:f8:d8:
0a:68:82:f1:f6:33:b0:76:12:15:92:18:f5:1a:a8:03:a6:b7:
f2:8e:3c:0c:36:de:fc:96:4d:7b:4f:25:a9:62:9d:6b:1b:5a:
cd:18:c9:b0:20:b8:67:ad:bf:71:0d:68:99:ea:c4:28:71:13:
63:4e:15:ef:eb:9e:05:0a:28:14:a8:c2:7d:6d:d8:0c:f7:8f:
6b:39:74:37:a6:d2:6d:7e:05:b2:01:d9:be:58:b8:1b:18:97:
07:bb:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:14 2025 by rpki-client