Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa
File: 6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa (raw, json)
Hash identifier: ShhgiVvkFdIkWFWl5U/q/H8+mRRG5lFX2QfsY0m1F4c=
Subject key identifier: FD:08:1A:39:3F:2D:02:22:50:C5:CC:9E:07:08:D6:D9:D6:ED:92:24
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848CC8A26FB99B0537734266640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa
Signing time: Fri 07 Feb 2025 02:30:09 +0000
ROA not before: Fri 07 Feb 2025 02:30:09 +0000
ROA not after: Thu 08 May 2025 01:30:09 +0000
asID: 12097
IP address blocks: 2001:470:410::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:8a:26:fb:99:b0:53:77:34:26:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 7 02:30:09 2025 GMT
Not After : May 8 01:30:09 2025 GMT
Subject: CN=28db85cf-2caa-4e55-939d-973918c34978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:26:de:dc:88:c1:2b:f6:7e:20:85:4a:bc:
cb:31:d2:53:25:a0:32:3f:09:42:53:cd:1f:3b:dd:
12:31:4c:06:a2:06:dc:c3:cc:01:1e:dc:c4:16:4f:
0b:45:b4:5b:8c:b4:f9:b8:7e:fe:91:83:65:ba:4c:
46:3c:de:7f:77:f7:eb:7a:02:72:38:2f:8c:f1:80:
90:b8:55:e7:dc:25:c2:b1:37:a9:75:df:c9:7c:ce:
9b:71:28:5b:ae:c8:7b:4f:14:9b:1b:0c:c7:79:66:
19:5c:53:63:c2:53:eb:b7:31:73:66:e7:d6:61:bb:
c1:78:4a:35:05:3e:3d:33:24:d6:a7:ed:81:73:04:
6a:f8:83:56:b3:6b:b2:da:d1:b4:14:da:dd:83:cc:
3b:0f:4f:a1:f7:f3:c3:74:6e:42:b4:04:e0:6c:fa:
35:6b:41:4a:36:61:7c:34:c8:65:62:34:d7:84:ab:
c6:32:46:58:b8:05:ad:37:af:8e:34:44:e4:85:73:
37:c1:84:0b:56:92:88:2d:dc:5b:0c:21:84:ca:4b:
0f:17:58:e9:3e:87:c6:fc:db:14:7b:49:29:e1:e2:
26:f0:54:6c:d9:a6:d3:f8:7b:65:86:23:c5:33:8f:
1b:5a:b1:15:d7:3a:1f:f1:9f:d8:96:e6:43:6c:3e:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:1A:39:3F:2D:02:22:50:C5:CC:9E:07:08:D6:D9:D6:ED:92:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:410::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:68:0d:0e:70:38:e0:67:55:36:1a:10:a5:1a:94:e8:17:2d:
b2:11:2c:00:89:74:56:ac:25:e5:11:a6:ad:e2:c7:7f:3c:45:
eb:1c:ec:23:e8:0b:4e:b1:13:ea:1f:15:bd:93:45:ff:ec:45:
0a:1d:3e:8c:80:7d:35:f8:51:62:10:a2:28:a6:d1:5e:0f:81:
cb:ec:14:b0:bd:2c:a7:14:7c:15:e1:bd:1d:40:d8:f9:6c:49:
3b:7e:79:c2:23:d1:13:ee:fd:d7:54:83:2e:1a:ce:c3:df:c3:
3f:07:d0:c7:15:75:77:c3:98:03:7b:20:d8:e6:d0:90:e5:1d:
f4:e2:62:3a:16:2f:9c:f9:29:6d:f7:25:bf:a6:a6:a9:88:f8:
df:bd:5b:76:1d:6a:1f:d8:5a:54:2a:e4:bd:e4:b7:dd:7a:d0:
cb:cf:a1:ed:d3:22:ab:ca:6a:11:18:79:9c:40:e9:83:07:f2:
f8:30:be:a6:fe:84:cb:e2:88:20:ef:c8:bb:2a:44:29:08:19:
fb:bb:31:d0:13:f5:c9:e3:28:e5:28:a2:1d:89:fe:e0:e6:85:
53:13:8f:8c:9e:d4:43:e2:12:03:52:30:3f:6c:b6:91:e0:27:
6a:0b:3b:7b:13:bd:5f:26:26:55:42:36:dd:4a:31:b5:55:31:
4c:9d:dc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:26 2025 by rpki-client on console.sobornost.net