Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d578c2d4-b5b4-3d27-8d85-826867d83c63.roa
File: d578c2d4-b5b4-3d27-8d85-826867d83c63.roa (raw, json)
Hash identifier: M8KV4yK0yPLrefrUNQRE30ZhH3CVvq5JOuyUWa/pXy0=
Subject key identifier: 39:CA:DD:21:E2:64:EC:57:69:75:DD:C4:BE:33:7D:64:B4:F7:B0:80
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E971DE6E5D0AD74BE800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d578c2d4-b5b4-3d27-8d85-826867d83c63.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 46440
IP address blocks: 2001:470:19b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e9:71:de:6e:5d:0a:d7:4b:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=557b1ac4-c78d-4c45-938b-3ce22b37f2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:82:13:c3:67:40:47:bd:c2:92:1d:1c:79:
5f:89:d1:13:57:c1:94:a6:da:ff:8d:81:66:fe:6b:
9b:54:ec:bc:1f:4e:f9:be:08:f7:76:30:0c:1f:29:
ab:fa:a7:49:f0:0b:6c:f1:9b:b5:8b:46:07:e9:c3:
29:02:8e:b4:8d:23:b7:66:43:c0:b8:b4:77:ca:51:
92:50:37:58:36:32:1c:d4:74:55:4a:d0:b8:ff:f7:
1b:d9:f1:93:af:3d:71:e5:dd:12:27:f0:3d:2a:7c:
5c:44:f6:d6:68:ed:99:1a:26:0a:d7:85:e8:f5:a2:
dd:cb:ca:a4:50:08:e4:c1:f5:00:48:1d:d2:a1:4e:
f7:ab:b9:8c:b8:f9:13:17:09:40:1e:79:a5:ff:d4:
01:29:7a:b1:fd:eb:ae:50:7e:e5:52:03:7c:30:0f:
19:cd:7d:04:94:b6:a5:91:26:aa:79:f5:a1:0e:0f:
f5:12:05:d3:2f:58:e8:10:6a:35:8e:f1:36:b5:34:
4f:05:20:3f:f3:15:ed:e7:57:e4:b7:37:1b:f1:82:
71:35:92:23:8f:d7:d0:69:a6:fa:ff:0e:4e:cd:db:
80:42:1a:e0:ac:6b:a2:83:64:10:25:a3:8d:a6:d9:
e5:bc:d5:dd:18:93:bd:05:a0:45:02:f8:f7:9b:41:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:DD:21:E2:64:EC:57:69:75:DD:C4:BE:33:7D:64:B4:F7:B0:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d578c2d4-b5b4-3d27-8d85-826867d83c63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:19b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b8:7c:c7:b3:22:50:d3:d9:34:40:2c:10:6c:4f:f4:b0:1b:
82:5d:58:07:8a:b2:22:0c:a2:41:3f:0f:3c:60:bb:6e:e3:21:
0b:e5:9c:28:29:11:b3:f5:f7:3d:b4:fd:c6:b9:1b:fa:e9:72:
f5:47:a6:a5:43:7a:cc:26:4f:11:1f:0a:aa:9c:e7:cd:2e:ca:
7a:4e:88:c2:92:e4:19:c3:61:41:61:c7:d2:5b:76:bd:91:8a:
ff:05:2b:7c:45:fa:ff:28:ac:15:45:d0:9d:7a:c6:6f:a3:6b:
41:0a:ed:8a:19:ca:cb:e3:3c:a3:fa:7e:70:b9:c0:03:80:ea:
8d:de:65:e7:df:fe:c8:3d:8a:27:be:38:fd:69:6c:e4:ab:de:
bc:c4:47:34:82:08:2f:93:be:2a:7c:44:e2:bc:14:7b:c4:45:
02:84:37:bf:e9:81:dc:b9:8b:4c:2b:05:b3:0a:fa:a2:c0:6e:
2f:57:78:79:88:77:57:02:a4:c7:be:5e:98:50:91:b0:1a:00:
30:94:97:20:1b:95:33:d2:98:17:a0:b2:73:c2:5f:34:be:fe:
e4:31:5f:86:9c:60:f7:5b:f7:46:cd:fc:ed:63:49:c0:5d:a8:
cf:71:dd:a1:1c:30:ee:a2:78:3f:e3:b8:c7:ea:25:37:fd:0d:
73:dc:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:13 2025 by rpki-client