Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb924c50-aec9-3931-87a9-2d613ef02a86.roa
File: fb924c50-aec9-3931-87a9-2d613ef02a86.roa (raw, json)
Hash identifier: kuOHLf/IQcOcreItPhGCcu4Pn7LY2hC9T5IBaQmNLso=
Subject key identifier: DB:7A:4E:C5:0E:D7:D6:19:2A:6D:7D:BF:82:F0:D0:03:55:BF:BC:19
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858492CB22F1568BC38947E001C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb924c50-aec9-3931-87a9-2d613ef02a86.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 46353
IP address blocks: 2001:470:339::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:2f:15:68:bc:38:94:7e:00:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=fb67506e-104c-4d4a-8cab-afb6a5285bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:9f:91:fb:ee:6f:4b:8f:37:40:b0:c1:fc:
16:82:65:27:ca:6c:a8:6b:22:2e:4c:a1:69:d3:7c:
6e:9e:97:d6:75:63:54:e5:66:d0:8b:0f:35:5d:f5:
98:77:5a:16:35:79:f0:49:5e:30:de:55:f3:fa:5e:
08:1c:79:7c:c0:e5:3f:14:0a:01:ec:b9:5c:f3:be:
62:b3:d5:73:90:ae:28:6a:a7:89:02:fc:62:cb:77:
b6:cc:19:89:90:b0:e2:4a:b8:ac:17:0d:4c:89:ac:
46:fd:da:67:d0:8b:fb:6c:ae:2c:d1:67:c3:20:e5:
eb:21:25:1d:c6:a1:69:c8:f2:29:d5:37:a6:f1:54:
05:f0:62:37:07:0e:37:51:11:ef:e4:ed:9e:ad:d5:
01:0f:cb:f9:c6:10:56:5c:24:2d:f8:80:ac:e3:64:
dc:fd:16:7b:75:5e:d7:e6:8c:fa:66:e8:4f:de:cf:
a0:2b:29:6e:d8:d7:85:c6:45:94:50:d6:8d:c1:9e:
19:89:4f:24:96:d2:5b:65:15:a8:7c:ff:21:91:e0:
25:60:65:19:40:5e:c6:1b:e8:b3:01:f4:f4:f8:9a:
7d:3f:01:0c:e4:86:9e:0d:c0:4f:fc:44:54:ba:35:
38:b9:b8:5e:5d:2a:4f:cf:de:8b:f1:a5:13:ae:5c:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7A:4E:C5:0E:D7:D6:19:2A:6D:7D:BF:82:F0:D0:03:55:BF:BC:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb924c50-aec9-3931-87a9-2d613ef02a86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:339::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:3f:6e:22:64:33:6c:3a:91:90:b1:78:27:d3:1f:47:14:2b:
df:88:9e:02:9e:34:30:b5:4b:84:76:3b:4d:dc:c4:e5:9c:74:
aa:c9:b7:ba:67:d5:0f:ea:38:58:b0:2b:1f:7d:f7:8b:23:89:
fc:e4:3d:72:9a:55:22:52:32:b5:49:8f:f3:6b:f5:99:9b:c2:
21:71:0c:e1:3c:35:1f:fd:a2:77:65:e0:2b:bd:9b:53:41:f4:
2f:95:6b:e5:7f:c6:42:fa:92:a3:1c:18:e3:3e:92:fa:ac:bf:
d4:bc:ee:cd:b4:d9:0b:2b:b7:35:ad:0c:6d:92:90:dd:15:49:
59:8d:47:1b:37:c6:f9:07:cf:75:02:f4:bc:5e:48:eb:e5:07:
0b:c0:c6:ea:7d:36:dd:0c:5a:e9:8f:04:d4:a6:c9:c3:99:b0:
37:a2:72:31:1f:66:b6:af:b8:a1:1c:9b:66:51:14:b9:79:7e:
7f:2a:c8:25:06:29:49:03:2d:fc:7a:8f:5f:42:c3:51:f0:1f:
03:c3:78:13:af:88:6f:07:57:12:b5:c6:f8:43:fd:67:b9:b5:
7a:c7:09:4e:7e:fa:94:61:b6:f1:e9:b3:b7:b1:e5:ea:bf:d5:
b8:a1:02:1e:59:22:a7:3c:06:a2:f0:de:bc:c4:28:07:67:3e:
3e:f2:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:00 2025 by rpki-client