Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef9c2f5a-a6b4-30a6-8dbc-f29c82ca7ba7.roa
File: ef9c2f5a-a6b4-30a6-8dbc-f29c82ca7ba7.roa (raw, json)
Hash identifier: FvpS1ZWdjt1fxNBFzo0KNLpdni3p7VvkDaIBaRP3oWc=
Subject key identifier: 13:60:FA:B8:57:FE:47:48:02:B0:26:A1:04:B8:33:8E:5F:21:ED:93
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E08B64FB47DFAB4DF940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef9c2f5a-a6b4-30a6-8dbc-f29c82ca7ba7.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 27424
IP address blocks: 2001:470:204::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e0:8b:64:fb:47:df:ab:4d:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=1244cc09-47f6-4b3d-b69b-af25e630f062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:03:2f:de:55:6b:29:c3:50:14:4f:ec:87:
d6:88:9b:5f:8e:2d:af:24:13:29:0f:24:7b:46:4d:
96:f6:df:56:ca:ce:70:31:aa:4d:b0:28:62:a4:7e:
b6:08:06:52:44:9e:ec:aa:b6:93:63:bc:f1:de:97:
a8:bf:57:09:06:0d:65:25:68:b3:55:44:dd:2c:36:
a0:8d:ca:b0:44:f6:18:f4:27:43:ea:95:a3:71:86:
42:a5:ab:6f:47:d6:ce:6a:09:26:6c:ed:e0:a9:2e:
92:dc:21:89:6b:be:3c:ef:00:51:42:7c:ad:be:4c:
f4:f4:51:74:49:40:30:49:61:07:10:be:c3:cd:e7:
87:ce:96:7d:cf:a0:17:cc:cc:10:c5:d8:16:8b:c3:
b8:f4:f1:14:eb:7c:ef:58:14:73:ef:6b:12:c5:59:
6a:a0:42:1f:a2:f4:2b:92:49:7c:76:b6:5d:a3:9b:
2e:55:a9:1c:af:29:93:c4:ae:6d:3e:13:2f:ff:ad:
0c:74:14:30:a8:33:6c:bb:0f:e8:9d:71:a8:af:a2:
93:7e:80:3a:87:ba:16:63:1f:af:d7:6c:22:7e:c5:
4b:dd:f6:1e:51:ad:f4:4e:9a:a7:42:eb:19:5f:8f:
d5:36:68:55:73:4f:00:34:5f:ff:65:69:35:0a:31:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:60:FA:B8:57:FE:47:48:02:B0:26:A1:04:B8:33:8E:5F:21:ED:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef9c2f5a-a6b4-30a6-8dbc-f29c82ca7ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:204::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:4a:dd:14:32:d6:be:41:5b:c6:04:2b:79:82:0c:f2:05:79:
09:3a:ec:63:fc:c1:e6:3a:a0:d8:84:22:cc:69:56:76:08:df:
3b:bf:27:cb:38:f4:52:5b:b3:f3:9c:7c:90:f9:f8:43:07:ad:
b1:4a:1a:d7:84:d7:05:57:1a:19:aa:a7:43:24:92:04:6e:1a:
cd:b5:56:71:a4:b4:93:73:9d:2a:88:5d:3f:13:9f:c1:fa:59:
8f:18:9d:e9:ad:b4:27:05:81:16:bb:7b:be:66:77:47:1b:5c:
6e:35:08:c3:af:60:06:0d:96:03:3d:55:2b:b3:2b:21:03:4e:
33:10:88:76:d5:3b:aa:8e:a6:62:25:f9:99:93:aa:1f:4c:d6:
e7:8e:bb:67:13:ef:d8:ea:2a:52:df:08:f6:53:e4:3c:b5:c9:
14:f2:ab:25:51:1e:5b:8d:e7:cb:2b:c8:a6:ac:cb:29:67:b4:
84:3f:06:a5:b6:09:a3:18:ac:de:57:78:40:86:e4:30:35:1e:
b3:60:73:3b:c1:8a:14:65:0b:7e:dc:9d:ad:5b:9c:d9:40:ca:
ea:9b:95:07:d5:61:ad:6e:ac:c0:a3:78:c5:90:c9:95:b4:7d:
c0:d5:06:75:96:dc:23:68:61:8d:41:47:75:a2:3c:77:e8:5f:
74:b0:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:43:19 2025 by rpki-client