Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3a8ad0c-80b9-3fc5-a24f-2962f73d967e.roa
File: e3a8ad0c-80b9-3fc5-a24f-2962f73d967e.roa (raw, json)
Hash identifier: h1Uu0MdB8o3iWXNN7Ea//bfu3awXUurVGc0Nk6YB8h0=
Subject key identifier: A2:07:F5:93:16:F8:C0:0F:6C:88:D2:BD:DB:8B:8C:83:1D:8B:FE:F7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E8C605CCD1B0DE13D080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3a8ad0c-80b9-3fc5-a24f-2962f73d967e.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 36902
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e8:c6:05:cc:d1:b0:de:13:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=71bc77cb-d938-4e90-b243-d76ad96087a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:8c:1d:e0:c5:95:9a:ba:31:ce:db:90:f3:
7a:0e:d9:e0:d6:e7:6d:50:35:36:be:bb:ad:6c:f4:
32:52:a1:39:6c:ae:68:37:05:9b:18:93:58:52:25:
aa:d9:59:86:2f:2e:02:13:34:c7:67:93:de:db:45:
a0:01:c3:37:d1:bf:2c:66:9d:e9:89:8e:86:73:31:
26:67:dd:ae:ec:9c:7f:81:a3:45:0a:e4:4f:db:df:
ea:6d:9f:45:dd:18:7d:23:d4:3d:20:36:7b:a2:38:
fa:37:f6:12:27:d2:eb:6f:ee:53:16:d8:04:5f:92:
17:b1:9e:2e:67:0c:fc:44:45:37:b5:3f:36:b7:0f:
97:09:e1:f6:12:09:37:df:09:34:26:01:39:91:1a:
86:7e:d4:5c:4d:58:b5:cc:12:32:e9:81:ca:04:3f:
41:19:c1:66:5a:bd:a7:98:e0:e1:38:65:cd:78:3e:
c9:57:84:b4:b9:ce:ed:bb:1b:63:e2:13:53:9e:42:
0b:43:23:01:24:f9:0d:1a:d2:de:80:41:7b:35:9c:
f3:c5:a9:44:46:d6:5f:fa:d4:8f:fd:d0:73:ef:7f:
92:b5:b3:30:85:ae:48:58:d1:5e:c2:e7:ab:5a:a6:
22:bb:90:e6:64:8d:c4:4b:93:c5:c5:e9:4e:f7:c1:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:F5:93:16:F8:C0:0F:6C:88:D2:BD:DB:8B:8C:83:1D:8B:FE:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3a8ad0c-80b9-3fc5-a24f-2962f73d967e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:bc:af:1b:7b:51:9a:fb:94:66:ec:c4:19:35:ad:1c:61:08:
0e:ad:ac:be:2f:ef:ed:9a:5e:1f:0f:38:d2:e7:5c:3c:ee:2f:
ec:b4:c5:80:db:ac:41:3e:e3:1d:7f:c2:8f:c6:2a:7f:9d:78:
20:80:c6:d8:27:e7:5f:ec:68:13:52:f8:ce:b9:1f:76:9f:1c:
2a:b0:d8:83:63:86:d9:c5:f5:03:98:62:8f:0b:cf:4c:de:47:
9b:5d:3a:19:79:11:51:d6:19:39:18:ca:65:96:79:13:11:77:
c2:57:cf:18:2f:d6:25:6e:64:aa:37:62:82:1b:03:75:0e:46:
de:fd:01:0f:5d:29:0e:19:d1:3e:b0:06:2f:28:fb:50:ac:92:
0e:a8:82:7f:dc:97:1e:a7:03:03:7e:cf:a8:86:75:85:17:66:
5e:f9:3f:7e:ab:92:f6:5d:3c:a3:45:30:9a:e4:ea:69:66:90:
bc:60:c2:30:f7:6d:ba:67:cf:59:e4:0f:75:8c:7a:1c:c2:76:
13:5a:8e:0f:14:95:72:9a:a3:e9:fe:0c:63:e6:10:27:ad:52:
72:f6:12:91:c8:35:67:83:a0:b2:02:68:0b:4f:26:2d:30:86:
7e:02:66:f0:fc:64:3b:26:e1:bc:56:8c:eb:62:67:38:ce:da:
49:48:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:23 2025 by rpki-client