Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e941f9e3-9166-3d56-97a5-2f46044951de.roa
File: e941f9e3-9166-3d56-97a5-2f46044951de.roa (raw, json)
Hash identifier: kiOZKwKsjqpdn+wFby/y0FUIw7ZKV3i0V/1h1gt9y+g=
Subject key identifier: F6:7C:F6:E9:3C:18:09:E9:38:DB:E6:0B:C6:F4:FD:EB:B1:9D:A1:B4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584917EAA656F02D9949310C6B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e941f9e3-9166-3d56-97a5-2f46044951de.roa
Signing time: Thu 06 Mar 2025 02:30:12 +0000
ROA not before: Thu 06 Mar 2025 02:30:12 +0000
ROA not after: Wed 04 Jun 2025 01:30:12 +0000
asID: 153466
IP address blocks: 2001:470:29a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:ea:a6:56:f0:2d:99:49:31:0c:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 6 02:30:12 2025 GMT
Not After : Jun 4 01:30:12 2025 GMT
Subject: CN=393cf5e7-4c25-4f03-ad9e-c6eee4940ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:f1:d2:02:e6:3c:85:f9:57:3e:01:15:72:
98:6e:a8:d6:af:e4:09:77:f3:d7:67:4b:bb:36:89:
8a:5c:95:c2:2c:03:12:63:52:a1:2b:06:12:ba:61:
c8:46:4f:71:d6:b3:f7:f2:f3:56:58:ee:f1:dc:a3:
3d:a3:73:2b:d7:52:26:f1:ee:8d:ac:44:55:27:eb:
b0:68:13:f3:3b:16:d6:86:84:c8:a7:98:2e:a2:77:
0b:a7:af:7d:1d:73:76:de:c4:6a:ee:da:b2:57:47:
54:b9:be:83:87:3b:2e:7d:34:3d:4c:28:36:20:1a:
f4:8a:71:d7:fe:6f:74:ab:7d:6a:94:27:5a:77:97:
fb:14:28:80:3f:bb:d2:18:3b:d6:e7:cf:44:05:de:
47:e0:6a:82:97:e1:55:c5:72:99:b7:51:4e:ce:de:
13:9e:8a:00:58:52:16:00:ab:e9:12:d4:65:ec:3c:
c2:21:5d:2d:13:24:31:31:53:ad:dd:48:16:ce:46:
bf:4f:e1:d1:2d:08:27:fe:7a:3c:28:53:32:d5:11:
5b:f1:1a:8c:24:43:83:8d:54:11:cb:bf:bc:1c:f6:
dc:fc:a4:41:91:7c:73:7c:bf:60:b5:cc:7b:ac:97:
aa:6a:6d:e4:f9:3c:ae:ba:73:ec:a6:97:22:91:58:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7C:F6:E9:3C:18:09:E9:38:DB:E6:0B:C6:F4:FD:EB:B1:9D:A1:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e941f9e3-9166-3d56-97a5-2f46044951de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:29a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:2c:48:6c:01:bb:c6:b9:d1:9c:33:26:6e:57:3c:00:7f:e7:
62:0b:e1:03:1d:a1:7a:e5:36:54:ca:31:f0:15:fa:3e:cb:fe:
1a:56:7f:2b:60:41:84:8e:40:35:18:c3:38:8a:e2:36:1e:92:
b1:4f:41:2f:de:1e:cb:41:b0:38:ca:d1:32:92:bb:31:d6:5b:
c1:54:fb:98:0d:d6:d4:28:1e:e1:5b:32:4a:d2:03:75:e0:50:
37:ca:f2:dc:d7:7a:3a:8c:aa:43:72:36:c3:81:bf:dd:9c:28:
f7:f6:c9:3d:38:d2:2e:ee:fa:f2:ab:26:35:79:39:e8:77:48:
a3:2e:a1:a6:89:77:5a:05:fb:49:53:aa:d4:0b:2f:cb:e2:cc:
01:02:a9:fc:5b:69:7d:c4:35:52:f4:4b:39:06:b8:bc:b7:be:
03:5a:17:8e:e1:93:22:d0:5f:b7:4d:e4:4a:93:c4:fd:02:c4:
25:30:dd:62:cb:6c:99:01:d3:7b:1d:ee:a2:d7:f9:96:e8:d2:
ae:ab:e9:44:99:77:1f:05:6a:b4:47:c9:8e:52:03:cb:61:72:
8d:c4:db:fe:bf:8e:bc:2d:ab:b9:14:b0:2e:ce:b9:9f:05:c3:
21:57:bd:7d:3f:3b:ef:29:0c:75:67:cd:ff:06:2a:99:db:e3:
91:80:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:15 2025 by rpki-client