Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa0d7819-a51a-36d8-bcb5-64d1e196a727.roa
File: fa0d7819-a51a-36d8-bcb5-64d1e196a727.roa (raw, json)
Hash identifier: ofsngB1L9rNT7ApJU/RjtICfYyQbYpmIgDRGXjHJvE8=
Subject key identifier: 15:DC:9A:8F:34:76:63:51:28:61:AD:66:7F:78:39:91:79:D9:1A:5F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E5621905485B708C4800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa0d7819-a51a-36d8-bcb5-64d1e196a727.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 34187
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e5:62:19:05:48:5b:70:8c:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=433a3054-57bc-406e-9f97-da7d7aac2d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:8c:c4:04:d1:70:25:85:b8:45:10:51:a4:
01:c4:41:da:8b:f3:77:71:ca:6d:1b:c8:e7:17:3d:
0d:11:8e:54:7c:04:3f:1b:cd:a0:9c:f0:fc:b3:99:
91:c8:fd:77:89:98:a6:95:c0:e9:17:6a:05:1b:70:
02:b9:3f:8c:5c:dc:06:7e:12:99:cd:76:52:0b:ac:
91:6e:95:3e:ab:0a:c7:87:74:96:1c:67:3c:4d:05:
e8:cf:de:86:d4:e5:8f:6c:85:1e:66:9a:64:55:47:
76:34:71:f9:f7:fd:98:73:03:83:f7:87:ed:6f:20:
4d:37:19:74:ba:b7:10:7e:bc:40:77:98:ba:ff:38:
22:21:ae:2f:f4:12:67:ce:63:57:6a:8d:cd:ce:ad:
d7:00:6d:9f:f1:80:a0:6e:13:0e:a4:fe:a1:a5:9e:
77:87:ea:a9:73:1a:d8:11:89:84:90:f8:da:bf:e9:
be:49:f6:5c:16:38:94:d4:85:98:da:dc:b0:5a:43:
f7:74:e5:68:6c:bf:0a:10:33:e3:2a:4c:14:fb:82:
e4:0f:22:7a:de:ed:86:a3:91:6d:0c:11:c0:ae:55:
63:0d:d5:57:04:c1:88:0f:b8:d5:62:8e:dc:24:7f:
34:a0:1a:41:bd:fd:4d:7e:bf:82:5a:91:b7:cf:f0:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:9A:8F:34:76:63:51:28:61:AD:66:7F:78:39:91:79:D9:1A:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa0d7819-a51a-36d8-bcb5-64d1e196a727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:c2:4a:ea:cb:98:18:d3:73:06:ad:4a:eb:53:a2:41:fa:7d:
50:2b:b9:d1:ce:49:4f:0d:74:91:a4:92:36:56:d6:73:d5:47:
c0:c6:6d:0f:da:0d:d2:e0:df:62:9c:ff:ec:13:af:e9:ba:09:
75:3c:49:3b:7c:41:f0:b2:7d:6e:c1:1e:5a:8e:7d:8b:dd:49:
5f:fa:b8:aa:73:d2:8e:97:d5:de:24:66:08:10:4c:f8:0b:15:
04:5a:a8:de:a2:5a:6e:16:31:e6:52:8a:ff:3d:d0:b1:11:c8:
98:91:6c:61:4a:81:8f:e4:bc:65:5e:fb:e7:8e:07:75:45:32:
05:f6:26:ae:3d:cb:47:59:bc:eb:88:ef:10:e0:29:69:72:18:
68:b6:2a:5f:5b:f8:21:4b:10:a5:0d:f3:92:e5:1d:8a:ad:18:
51:bd:b8:ca:b7:3d:51:59:e5:27:3c:bd:d5:a0:67:6f:e6:e7:
a4:cf:0f:36:83:7c:ec:32:ad:1e:81:71:c6:54:cf:77:9d:26:
7a:2f:6f:a6:ed:55:cc:27:d8:bb:c8:b0:03:7c:aa:48:7b:bf:
b4:74:8f:9b:fa:85:35:35:82:e0:fa:cb:9e:fa:ae:2e:55:52:
b9:3f:33:3e:e1:ad:52:62:00:37:79:02:ad:09:1d:a2:bf:4c:
ca:ee:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:43:17 2025 by rpki-client