Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa
File: d777fcbb-172a-3a40-a10d-f51fd828f583.roa (raw, json)
Hash identifier: gnwGNnA7gzP44LzSt8Jj4YKHC6XV2lXYKHmD8/EfPzw=
Subject key identifier: 7D:83:A0:A9:0E:BA:36:BB:12:20:CA:BC:25:83:15:34:28:8D:05:A1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C8A1FE082574AEF98A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 212955
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c8:a1:fe:08:25:74:ae:f9:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a1df25b7-6323-467e-8427-37878b099135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:3e:c6:b6:4d:30:c5:1f:85:bc:d8:85:4f:
67:c7:3c:72:a8:22:2f:3b:16:7a:5d:19:e0:b9:09:
c7:7f:50:45:d8:ef:ed:ad:68:5f:c0:91:d4:72:40:
cd:b6:de:37:68:c8:ef:8f:e2:1f:5d:4d:21:16:66:
ab:cf:77:5f:6e:7f:35:66:f8:a6:21:c1:05:06:db:
b7:46:fe:9d:e7:0e:ec:1d:34:7b:3f:90:be:60:19:
f4:67:14:b4:15:f7:78:2b:4a:e0:7b:7c:f3:91:73:
22:00:5e:ab:f2:67:a6:66:fb:1d:aa:5c:66:b7:d4:
27:37:84:d6:1a:80:31:95:07:ae:98:1b:95:9b:32:
11:9b:05:34:f5:fe:94:d0:e8:ef:e2:e9:59:14:16:
1a:e2:a3:05:08:ca:5e:fd:b0:8a:50:91:aa:56:0f:
33:1d:9c:8d:35:10:ec:48:6a:57:c9:fb:a7:67:ed:
05:6e:ea:a4:30:d2:55:d7:c7:83:26:1c:ab:09:ae:
f2:1a:48:7e:af:cf:1a:c2:de:6f:27:fc:b0:a1:7c:
07:1d:64:eb:b1:89:9e:7a:96:1f:b3:6f:42:bc:b3:
36:b3:03:56:89:81:f1:2a:98:67:af:11:49:ab:5b:
41:77:33:f2:29:b4:c5:16:38:d3:38:7c:23:fd:5e:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:83:A0:A9:0E:BA:36:BB:12:20:CA:BC:25:83:15:34:28:8D:05:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:8b:11:f6:f5:e9:c9:15:f7:30:a9:51:60:7c:13:62:f4:65:
7a:6b:75:bd:e0:0b:e2:f4:35:af:a5:9f:2a:f9:9e:9b:8d:36:
b9:85:48:b5:51:6b:a1:10:b1:fc:e0:86:ec:93:cf:fc:41:15:
82:af:1e:75:94:28:f5:c2:22:5a:d9:eb:83:19:c2:34:23:3f:
11:43:94:ae:c1:92:e2:66:c0:d9:07:3c:1b:03:07:70:c4:cd:
85:fd:68:e1:fa:67:49:aa:d2:a6:7a:9a:a3:36:fc:6c:6b:3f:
0e:0a:25:1b:3c:85:38:56:8a:5a:b5:f4:82:dd:18:df:2b:26:
0f:d2:1d:4e:d9:da:ce:40:ac:39:1d:7e:94:c6:3d:3c:fe:ce:
24:b9:df:52:8f:66:d7:46:41:4c:ee:d1:35:2c:7a:92:fd:10:
26:a0:00:b1:6d:30:52:f2:56:e1:89:b1:9d:f9:63:97:bc:91:
e0:3d:a9:54:54:d1:c9:da:c6:78:60:3f:26:17:09:dd:32:e8:
50:16:1b:c0:77:5a:c9:8d:d5:c1:73:31:61:ea:86:67:f6:0c:
99:18:cd:f7:f6:9d:ed:21:5d:ae:f6:f5:fd:b9:7d:4e:a8:8a:
f6:6a:61:10:4c:c4:6c:90:8d:4b:e2:c4:55:1d:ef:d4:ab:30:
78:00:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:22 2025 by rpki-client