Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa
File: f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa (raw, json)
Hash identifier: 6de5jVXLXz3nqVpufEW7sKVB4/Xt2SQAAhgyPXmkidU=
Subject key identifier: 5B:8D:90:B7:3C:B5:54:09:27:B0:1D:D6:1F:CB:4C:AB:51:41:41:74
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858490E16B2AEF38AAD055C4F3600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 51069
IP address blocks: 2001:470:3e2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:b2:ae:f3:8a:ad:05:5c:4f:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=7ccf6d08-979a-45c2-b4a9-3bee84c38c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:14:a1:b0:77:96:83:e4:4f:55:07:93:0b:
29:d7:a4:c4:d8:9b:f9:29:e1:c3:84:80:21:55:28:
ad:a9:ae:fd:8d:7c:27:a7:2c:5f:4e:03:d0:97:fd:
28:7a:91:0d:32:2d:d8:72:99:e9:92:cf:87:14:08:
b3:9e:e9:b7:ca:7b:f1:cb:79:ec:83:66:cf:9b:1b:
33:b6:17:b7:fd:ad:c2:ae:4d:e4:8e:9b:d6:85:ea:
40:eb:9a:a5:14:ae:69:13:10:ba:d5:13:57:31:94:
92:b9:f6:df:59:fb:aa:39:5e:73:de:1a:db:79:24:
c3:4d:b5:0b:4f:11:dd:33:f8:a0:a5:da:95:8a:ae:
c4:cc:df:31:1d:e8:c5:7e:99:8e:cd:9c:e9:41:16:
eb:74:90:d3:c7:7c:a0:8b:7a:e0:f3:bc:b3:a3:42:
ec:17:17:92:18:1d:ef:dc:3c:fe:12:c6:9c:0d:6e:
7f:65:c3:c4:99:6b:49:d6:6c:4d:bb:f5:a7:1a:8a:
65:1f:ce:d1:3c:8c:1a:03:f4:89:ad:14:88:ac:62:
b6:56:f9:2f:02:02:b0:88:43:ce:65:31:50:ed:1d:
cf:41:3a:48:b6:02:19:ef:54:79:02:7a:67:ef:62:
45:ae:07:ff:24:ce:a6:13:db:16:85:be:12:5d:b9:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:90:B7:3C:B5:54:09:27:B0:1D:D6:1F:CB:4C:AB:51:41:41:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3e2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:12:f7:47:4c:67:ff:5c:23:55:f0:5b:d0:a2:69:bd:62:29:
2c:57:74:71:e2:ec:29:66:46:33:e2:83:c1:f6:34:c4:90:fb:
6b:75:cc:29:37:d6:4e:80:91:2f:cd:b8:ac:dc:ac:36:aa:12:
a8:61:37:af:db:be:26:ab:7e:f6:07:a8:ed:e2:ee:97:44:76:
26:e0:3c:3a:dc:43:ef:b7:64:85:fa:42:4e:26:e1:e4:6c:57:
4a:2e:53:e7:a2:e6:09:27:01:06:d9:b5:a4:9e:a3:36:b7:43:
e4:ff:4c:63:26:45:e6:3d:eb:22:69:a6:96:35:89:51:80:c9:
ba:6b:74:f3:32:5a:f0:ce:22:35:b1:92:f2:b6:4d:46:19:b6:
1b:81:a2:89:4b:58:83:c2:e5:30:04:5e:10:dd:df:eb:db:96:
82:ba:65:8e:61:71:7d:78:08:9c:93:5d:9f:71:1b:0c:8c:f8:
4f:2d:21:ab:bb:df:a7:d8:c3:84:a9:c7:e6:c9:cb:5b:cb:28:
50:2d:11:aa:94:31:91:32:45:70:b1:0f:0f:99:7b:b2:c9:a6:
21:5b:3c:44:64:d1:67:ed:ba:58:57:29:32:fa:60:c3:59:79:
3e:93:cd:fc:dd:a6:65:e7:e8:df:21:c6:6a:2a:8b:91:5c:f7:
75:23:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:32 2025 by rpki-client on console.sobornost.net