Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e58cd4a2-0bd5-3888-8c83-a306664c73c1.roa
File: e58cd4a2-0bd5-3888-8c83-a306664c73c1.roa (raw, json)
Hash identifier: ikyxPxd0k8zCbt2hgpxi9XcJQfDBFSCVB0oyBzoe7uE=
Subject key identifier: 9B:1F:15:9E:C0:CD:F3:F8:1B:A0:28:6C:CA:94:F0:2A:B1:52:A0:74
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849446943979C7FCE2AB6038200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e58cd4a2-0bd5-3888-8c83-a306664c73c1.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 215444
IP address blocks: 2001:470:33c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:43:97:9c:7f:ce:2a:b6:03:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=2bfe3e9c-6aae-4143-8204-c4d9ea01069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:2b:68:89:ea:a3:3b:e3:12:ee:f3:86:cb:
84:06:8b:2d:66:a6:03:ab:61:ef:38:13:59:33:05:
d5:5a:09:55:dc:1b:83:5c:5f:4d:5f:d6:3f:c1:ea:
77:39:fe:9b:22:27:ba:45:56:af:0a:9e:70:46:a8:
bf:19:0a:06:30:02:2f:fc:55:28:ee:44:ea:82:1f:
e1:2b:0b:61:91:2d:d2:e5:a0:49:82:ef:ed:eb:e3:
8a:dd:b7:d0:bf:a3:09:43:dd:31:74:c9:2e:23:11:
a7:5e:d3:9d:14:25:82:e2:da:7f:73:e6:08:88:37:
bb:3e:ae:84:56:2f:f4:29:c9:e0:17:4d:f9:25:59:
75:ff:20:c6:57:df:25:9b:3a:b0:70:05:1c:d7:78:
0b:44:34:5f:44:1f:26:11:6b:a2:9b:41:53:cf:f7:
c6:e3:fe:b2:40:6f:39:34:49:84:1e:c1:75:f3:b1:
6b:09:fc:23:77:79:98:2e:46:1c:3c:8a:87:d9:1a:
8f:1b:06:35:d8:34:34:fc:d8:ec:dc:ff:a4:48:ea:
fe:38:56:d4:cc:74:20:7d:6b:40:f9:cd:a3:33:ab:
1a:55:dd:38:63:50:3f:41:cc:04:0b:00:01:9a:61:
bc:89:db:68:42:07:40:37:37:80:0f:87:2e:8a:b8:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:15:9E:C0:CD:F3:F8:1B:A0:28:6C:CA:94:F0:2A:B1:52:A0:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e58cd4a2-0bd5-3888-8c83-a306664c73c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:33c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f8:d8:e5:0a:1c:8e:60:08:42:16:b0:07:94:65:c0:5e:bd:
b0:6a:3e:87:fa:84:32:6f:d5:af:6b:59:a3:e1:15:8f:cb:c4:
23:30:5b:8a:df:c0:9d:df:df:6f:bd:5e:41:55:1b:01:19:46:
a5:1d:74:36:32:fd:89:b8:2a:b4:ed:62:cb:c2:91:a8:79:be:
fb:4b:56:25:a2:fe:c5:ef:46:e1:bc:48:c1:4d:a4:27:a2:93:
42:f9:b9:a8:bb:bd:8c:09:b5:9c:58:11:e2:dd:e4:7c:b8:48:
1b:14:9c:51:f5:39:86:90:af:bf:f3:74:bd:07:98:21:c0:77:
72:ca:24:1f:34:39:c4:69:fe:05:21:4b:2a:26:66:cf:63:9d:
94:a8:4c:b5:ce:d8:50:4c:ff:32:4f:8e:07:6e:21:7f:be:ed:
ac:00:46:64:e4:71:db:a2:ee:4c:41:b6:11:46:55:90:ff:20:
6e:ed:ae:14:a6:44:d2:3d:49:1b:1e:15:06:26:c5:72:3e:04:
7d:bd:3b:f1:76:fb:a4:a9:d9:b8:05:c7:1b:d9:04:d1:b9:11:
49:a7:60:3a:90:39:5d:7f:26:b3:03:8e:b1:ca:98:ec:d4:a6:
2a:91:24:7c:e4:4f:35:0f:ba:6e:e6:77:1c:8e:58:4f:77:39:
fc:2f:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:47 2025 by rpki-client