Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa
File: e2c22353-7880-38a5-82e6-1559e24cb966.roa (raw, json)
Hash identifier: gIZ/QZ+8T4jWIZvE2LzT2y4lzufSd4BvRCh22FpK4qo=
Subject key identifier: 5A:E2:2A:03:EA:C0:C2:F3:61:1C:C2:8E:2D:66:FA:FC:F2:AE:49:44
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858493EE27662270BE8248AB9DB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa
Signing time: Thu 20 Mar 2025 01:30:14 +0000
ROA not before: Thu 20 Mar 2025 01:30:14 +0000
ROA not after: Wed 18 Jun 2025 01:30:14 +0000
asID: 11476
IP address blocks: 2001:470:53::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:e2:76:62:27:0b:e8:24:8a:b9:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 01:30:14 2025 GMT
Not After : Jun 18 01:30:14 2025 GMT
Subject: CN=4d067e98-402a-4271-b909-fc2f533132c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:df:37:da:bb:f9:c4:60:39:61:f3:57:ab:
9c:53:f2:44:29:d5:00:09:11:e0:31:cb:5e:bf:07:
83:68:16:da:6e:16:f7:52:d0:9d:c4:6e:af:11:1c:
0b:ef:b7:7d:c7:48:a7:42:3e:ce:09:14:62:e8:06:
c7:38:74:26:ca:96:67:a8:25:2e:10:95:b1:16:03:
f9:30:53:ed:34:7a:8d:e9:b7:78:74:3e:08:17:a2:
6d:9b:f8:49:02:c8:bb:c5:d9:08:2e:9a:45:83:52:
07:e3:e2:2a:cf:e9:55:e5:83:7c:fd:9b:9a:1c:29:
d9:66:67:77:eb:24:18:c0:b7:97:46:86:aa:d8:8c:
c4:4a:28:5a:ec:74:db:2d:42:be:91:92:60:24:d0:
aa:34:e6:d5:a4:b0:b5:ee:51:cc:1f:0b:44:c8:e2:
91:d2:87:ff:27:38:5c:15:fd:62:30:00:48:c9:c0:
7e:aa:fa:e1:b0:cb:08:24:c9:c7:86:ac:0f:fe:f1:
72:e7:d4:e8:c3:9b:35:d7:70:a8:77:44:d5:8e:51:
e2:d8:46:98:45:d6:2f:cf:73:e2:46:ac:a6:0c:55:
6d:07:d1:57:42:76:0a:2d:ae:81:7c:25:23:7b:13:
b9:b7:9c:7d:3e:16:d1:32:96:19:ce:54:e4:83:b4:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:2A:03:EA:C0:C2:F3:61:1C:C2:8E:2D:66:FA:FC:F2:AE:49:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:53::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:54:84:9a:91:56:60:a3:84:88:2f:c6:f1:58:56:c9:a1:9f:
bd:a4:e7:22:c9:37:a1:19:9b:68:a3:77:dd:f0:93:e6:8f:dc:
1a:f3:aa:b0:c0:f8:9d:c7:01:4c:75:00:f5:dc:28:38:bd:68:
d5:25:22:f8:61:96:e9:20:2d:38:a8:f4:5a:66:bd:34:62:d0:
1b:28:68:dd:37:36:84:a0:a2:02:16:74:f5:01:00:80:c5:8a:
ba:9c:e9:fa:fa:94:9d:bf:5d:62:8e:8b:d9:88:49:c8:8e:c1:
ac:c2:f3:cd:9c:f5:cf:78:54:e2:a9:3f:02:65:f8:5c:b0:4f:
67:2e:63:54:d5:45:94:66:e0:b3:0d:02:5e:95:82:80:41:f3:
6b:19:02:7d:02:8c:d5:10:a5:21:e3:9f:b0:bf:d1:62:f2:db:
f9:00:e8:b6:c5:3c:4a:a1:53:30:c8:9a:67:90:98:bc:5e:47:
f9:25:84:62:c5:97:8d:bd:f2:bb:03:0d:ff:14:50:33:c0:fb:
a3:42:91:88:50:81:fb:50:a4:32:64:8e:18:cd:5f:6e:e5:50:
4d:15:63:47:e3:f0:de:28:34:3c:4f:08:4c:a0:96:d8:e2:6d:
44:1f:57:e7:81:ff:db:d6:f7:08:8a:e6:fe:f4:c8:ea:45:12:
37:0a:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:58:38 2025 by rpki-client