Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa
File: d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa (raw, json)
Hash identifier: 05P2ADZoLJ1u5asknbwio9II7cxF12/+gTFxTBxLbIE=
Subject key identifier: 7C:A5:50:25:64:A7:14:FB:E3:80:A4:6E:FC:FE:16:2F:4E:DE:21:9E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858492F87B4127A878B46B324E300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa
Signing time: Fri 14 Mar 2025 13:30:15 +0000
ROA not before: Fri 14 Mar 2025 13:30:15 +0000
ROA not after: Thu 12 Jun 2025 13:30:15 +0000
asID: 196975
IP address blocks: 2001:470:427::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2f:87:b4:12:7a:87:8b:46:b3:24:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 14 13:30:15 2025 GMT
Not After : Jun 12 13:30:15 2025 GMT
Subject: CN=39fe771a-7456-4404-a78a-9e787a3eff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:3c:6a:5a:05:3f:70:e5:85:59:1f:70:9f:
9d:69:56:5e:24:40:4d:a6:02:8d:d3:4d:0a:09:66:
dd:f1:ea:9b:5a:8b:11:d8:5a:ef:aa:4e:fe:42:5f:
50:f8:b0:d0:b0:cf:45:b5:1d:9a:51:57:72:2b:17:
c2:0b:b3:77:a7:e2:12:b3:f7:e1:26:a7:75:1d:d3:
28:1a:ff:ab:10:f1:4b:3d:2c:a0:f2:a0:0a:41:6e:
28:fe:43:75:1e:52:a9:13:de:79:d9:f4:cd:7b:a3:
85:35:3e:90:2a:68:da:6a:60:99:11:0a:d3:3d:bc:
1a:e5:b6:25:3b:8d:36:3b:6d:46:b1:87:58:7b:ff:
ea:1d:0d:19:50:2d:f3:a8:9c:90:5b:1f:32:74:83:
df:8b:51:4c:8a:b8:73:7f:2b:d9:91:9d:bc:4b:4e:
d2:8a:37:84:82:d6:f6:78:71:6f:33:dd:d2:b1:88:
b2:84:45:6f:ae:45:1b:3d:28:7b:96:29:a8:58:70:
58:e6:aa:01:c4:9b:cd:e2:f6:fe:73:c7:95:4d:97:
f9:ca:f5:0e:1d:ac:5b:32:8d:12:6b:10:57:43:52:
d4:52:f9:b4:1c:58:51:c1:ef:60:a0:88:07:d5:c6:
bc:c8:a6:df:39:e0:d0:1d:dd:bc:98:4f:67:34:81:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:50:25:64:A7:14:FB:E3:80:A4:6E:FC:FE:16:2F:4E:DE:21:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:427::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:5b:fc:53:43:73:b8:0b:8a:d9:54:26:c2:bb:b1:e6:04:a0:
33:25:8b:5c:6d:58:a4:e0:bc:59:f3:c1:62:69:4c:57:d8:eb:
67:c1:37:10:ba:1e:e3:77:ed:9d:62:4e:ae:5d:bf:37:cd:1b:
a5:7e:6f:64:94:c0:24:a6:d4:94:29:04:fb:ac:5e:c4:f3:69:
71:a1:3f:78:ab:f4:e7:6b:1d:1d:ef:29:18:9d:64:c2:45:fd:
c1:2c:21:ac:dd:e6:ba:fe:f7:5a:e6:1e:d4:79:ca:8a:fa:21:
d2:68:1e:90:79:75:85:4e:b5:0c:c9:cc:b5:31:54:d3:e8:85:
4c:b5:fd:08:9a:09:8f:d2:4f:c1:82:9a:4d:96:42:e1:80:66:
b4:64:c9:b5:46:2d:4f:3a:8b:00:43:38:50:77:96:45:6f:be:
4c:e9:8d:37:d0:fb:da:e2:17:eb:ae:2c:5c:07:65:e9:f6:96:
ef:0d:92:38:af:b9:b7:6d:d8:fd:44:cb:88:2c:d4:d2:5f:6c:
72:b5:0f:57:a3:86:0a:a7:9a:1c:f0:2b:dc:33:7a:76:d1:d5:
ce:0b:be:9b:e2:ed:28:57:a9:a7:eb:03:97:e0:40:a8:9d:b3:
89:88:74:68:c1:6c:6e:e4:af:32:3d:ea:dd:e2:18:d8:16:3e:
bd:5a:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:21 2025 by rpki-client