Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/deba0a95-5e83-3065-9f21-dcf4b5d7511f.roa
File: deba0a95-5e83-3065-9f21-dcf4b5d7511f.roa (raw, json)
Hash identifier: JVPHseNrSCLRl0CHHq5P4uc5Ny+hkP3QbpShE95k/Lg=
Subject key identifier: 19:86:60:69:29:DC:B1:8E:36:E6:73:E3:9D:8B:D7:0E:CE:98:C2:ED
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926CFD495A5E6F39EE2BC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/deba0a95-5e83-3065-9f21-dcf4b5d7511f.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 57907
IP address blocks: 2001:470:eb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:cf:d4:95:a5:e6:f3:9e:e2:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a90c40fd-3473-4822-bc9c-d2d2a4759346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:6e:93:70:cc:b2:d8:52:a9:1c:62:cb:1c:
2a:01:3a:1f:44:be:ab:ec:f3:b0:02:09:58:16:c4:
13:ed:6e:94:e1:48:92:b7:72:78:68:7d:5d:ad:0d:
52:b0:d6:09:d5:ac:53:87:a6:b9:5d:31:84:1d:5f:
b5:15:08:e4:5a:26:2d:fb:fa:a4:e3:9b:0e:72:0b:
74:90:9e:27:78:f5:a1:50:33:f7:22:b7:c4:62:37:
8b:be:63:eb:59:3d:ed:13:8e:9f:62:40:be:80:f3:
0c:fd:1b:f8:8f:7a:26:1c:26:e4:a6:52:bd:50:49:
d3:68:f7:75:ee:13:7b:a5:d4:58:88:c7:81:91:58:
2a:4c:6f:71:ae:dc:f8:8c:32:f5:c2:36:b2:53:97:
71:21:3c:83:64:b7:ed:83:c7:c6:de:06:42:90:a1:
57:97:87:24:23:08:bf:d3:46:89:97:1f:65:17:2f:
1f:3b:6e:4b:0f:24:1a:76:cd:51:ec:0f:0d:2a:d8:
fc:38:4e:55:3d:60:f6:f1:92:70:85:80:fd:4d:84:
63:e6:51:21:c0:c1:e2:8e:0c:7d:3b:ef:46:89:ac:
e8:5a:e1:14:a3:14:4f:15:d5:5b:c7:e5:6b:43:23:
60:04:67:1a:c3:57:63:70:d9:11:ef:02:5b:d9:00:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:60:69:29:DC:B1:8E:36:E6:73:E3:9D:8B:D7:0E:CE:98:C2:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/deba0a95-5e83-3065-9f21-dcf4b5d7511f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:af:e6:62:8b:a3:86:10:d8:d0:f1:87:ff:da:7b:e0:fc:6c:
a8:2c:21:3c:72:66:b9:1a:62:b0:77:65:38:b7:cf:32:60:2e:
06:04:4b:6e:8e:6e:b7:dc:0b:29:5f:aa:b0:04:ce:a7:83:7e:
4b:24:65:26:a4:b5:8a:cd:ef:24:84:15:db:cf:96:62:95:01:
e8:45:d5:05:56:19:85:51:a3:26:6c:e2:df:2b:04:9e:da:dd:
1a:0d:2c:79:ad:d5:7e:06:a1:ed:ef:0c:da:e4:a1:f4:0f:a6:
1c:a6:c7:e8:3f:d6:bc:a3:b6:a3:e1:61:49:1e:8f:85:ae:81:
10:3e:ec:55:ce:b3:12:8c:88:02:52:fd:0c:fd:bf:51:e0:92:
8b:87:04:5c:26:0b:78:12:25:cb:8b:26:56:a9:40:95:f9:1d:
4d:09:cf:c2:63:41:a2:e5:eb:61:d9:81:02:ae:a1:ff:cf:c8:
3b:95:52:79:2d:07:aa:63:3c:46:77:b1:bf:e6:2a:f1:15:7c:
00:46:ed:c3:6d:d0:b1:61:4c:e6:0a:ec:07:38:e3:36:e9:c6:
7b:9c:8a:1d:b0:f9:2d:0e:72:77:0c:8c:8e:a6:0b:ed:82:75:
b0:6c:d7:06:e2:d6:c9:95:d6:41:8b:83:b9:a1:da:c9:eb:f5:
9a:0e:ca:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:25 2025 by rpki-client