Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff4ae1ca-432a-3b79-9d34-47f76c009d27.roa
File: ff4ae1ca-432a-3b79-9d34-47f76c009d27.roa (raw, json)
Hash identifier: oZe3e/U5ipIp99tU1hbdTI+fgSBhIcaO7I7lU3XQB0g=
Subject key identifier: F1:BB:13:EC:4C:EE:92:DF:C3:4C:49:44:D8:72:17:B9:C3:87:C7:96
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858492CB22EA275E062FC34465500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff4ae1ca-432a-3b79-9d34-47f76c009d27.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 150158
IP address blocks: 2001:470:39f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:2e:a2:75:e0:62:fc:34:46:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=92b5a0ac-5f4f-4233-b40a-baf2d19815a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:01:da:6d:fd:43:0e:37:1a:14:af:a6:09:
8e:63:44:3e:b0:c3:f9:da:d3:bd:50:43:aa:cc:49:
4e:8f:25:f3:68:1a:11:2d:27:4e:b5:1a:c4:82:b3:
4d:0c:af:71:01:78:7a:70:86:09:1f:68:58:c5:cb:
99:be:4f:72:a7:b8:22:11:02:e0:4c:f0:29:e7:69:
d9:e0:5a:e4:8e:26:ef:a6:de:d5:a7:58:9a:54:a8:
3a:78:3d:00:52:a2:51:4a:34:c8:a6:1f:ba:99:a5:
24:5a:42:f1:f1:ee:39:6e:e9:7a:9f:3d:59:3c:6f:
35:93:da:ea:78:fe:af:03:94:9d:d8:fe:8f:b8:6d:
cf:e1:5b:41:3f:82:83:33:3c:bf:f3:d4:3c:d5:ca:
43:d3:44:da:8d:50:00:ee:bd:f9:9e:f4:d3:15:9b:
f2:6f:2a:83:63:40:12:b9:d4:c5:c3:0a:d4:47:89:
f0:89:aa:17:e2:dc:cf:22:a8:47:2b:e2:4f:ee:71:
ea:92:34:ea:72:85:59:04:2d:4f:fd:0c:e9:04:44:
94:df:aa:ab:6a:a9:65:e1:7b:65:fb:0c:4c:ae:d9:
ba:4d:a6:bd:3b:79:66:c0:3c:5b:cb:71:7a:45:a1:
41:fc:02:96:a3:d4:d2:85:e9:36:94:9f:8e:43:e9:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:13:EC:4C:EE:92:DF:C3:4C:49:44:D8:72:17:B9:C3:87:C7:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff4ae1ca-432a-3b79-9d34-47f76c009d27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:39f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:39:75:6f:8c:a7:0b:9d:3d:54:fb:72:ff:d5:8e:c0:b2:3f:
e8:55:43:8d:ec:c1:dc:57:c0:45:4b:78:eb:5f:7f:36:92:e2:
aa:a4:81:24:27:36:55:4f:49:71:98:6c:f6:52:cd:46:7d:05:
20:45:8e:78:26:d9:eb:a6:3c:98:11:d1:e1:17:c7:28:28:e7:
36:9d:87:b0:1e:8b:ac:b8:c1:ec:9f:0c:22:ed:7f:00:81:2f:
8e:5b:97:55:6b:3c:c8:d3:18:ed:f4:ad:88:30:5d:a5:2d:dd:
86:2e:f1:61:b1:68:12:b5:fb:70:8f:90:68:fe:3f:e5:17:8e:
4a:88:34:aa:8b:ef:d2:b3:2f:12:09:f7:50:e1:10:9a:bd:7d:
f5:c5:8a:36:4b:8c:61:3c:f0:b4:fe:ec:ca:94:b3:a3:0f:db:
a3:c3:72:6f:ce:ed:4f:db:2f:76:14:02:8f:b7:a6:d0:83:2e:
63:d6:a8:de:46:52:e5:62:1d:ab:c9:4c:a2:76:9b:64:34:b4:
41:03:cc:f4:61:ea:04:62:53:60:3f:b1:ec:a2:b3:99:1f:8f:
62:a2:5c:b4:c3:bf:9a:87:14:cb:6a:50:18:b2:21:db:3f:91:
c6:0c:a7:02:4e:cf:3e:06:9f:e5:b3:15:31:42:b9:76:38:75:
73:95:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:19:28 2025 by rpki-client