Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2478e74b-3134-3561-9e39-86d885f4b19d.roa
File: 2478e74b-3134-3561-9e39-86d885f4b19d.roa (raw, json)
Hash identifier: PZFITecU+tFU+E1P/3ylRsLDBrqR0QEuwjJjFyR2Siw=
Subject key identifier: 85:FC:5D:24:21:11:75:C0:D0:4A:6A:68:24:15:13:0F:8B:03:99:1D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF950266515A35E06B4C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2478e74b-3134-3561-9e39-86d885f4b19d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 29768
IP address blocks: 2001:470:1c1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f9:50:26:65:15:a3:5e:06:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=783c4239-3862-48ca-94f9-1816468f48c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:d7:95:02:8c:4b:cc:0e:8b:bb:bb:ac:ae:
76:1c:38:0d:e8:ef:a3:1a:c4:f9:3f:f2:53:f4:c1:
ea:ad:b8:49:3e:36:b6:88:ef:bd:b8:86:8d:93:07:
56:ef:2a:24:d5:b1:4e:2a:c1:85:fb:81:65:aa:b1:
67:50:09:80:e7:ca:96:78:3a:29:9b:5c:62:da:62:
89:ea:85:57:dc:c3:2c:92:d4:fe:1f:97:48:12:a4:
85:9d:27:ae:e3:fe:9c:dc:dd:8e:39:f3:86:04:e9:
cd:51:34:d2:dd:6c:44:bc:79:94:a7:39:44:6d:03:
d1:bf:ed:38:eb:f6:73:e4:e7:cf:bc:20:ce:92:60:
e5:9d:91:ec:56:61:8e:f6:91:f8:54:fd:22:47:b0:
74:d3:88:1b:db:61:8f:5e:81:4e:e6:72:f8:c6:3d:
19:95:df:8c:b4:0f:76:e3:1a:a6:66:88:28:16:7d:
3d:d5:a7:34:48:01:92:73:f8:1d:5d:16:d1:82:43:
ea:b2:9b:67:82:d8:2e:1b:11:3f:5c:72:de:3b:87:
ca:4f:8d:92:e9:a9:37:20:68:90:fa:eb:63:36:72:
6c:18:1d:24:3b:3d:ee:0f:1f:c4:ba:7e:89:c7:43:
01:01:79:39:f9:32:b9:1c:02:1e:ff:91:84:8a:f4:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FC:5D:24:21:11:75:C0:D0:4A:6A:68:24:15:13:0F:8B:03:99:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2478e74b-3134-3561-9e39-86d885f4b19d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:fa:ed:8b:73:3a:37:14:57:55:c2:86:01:82:da:f4:22:7a:
ae:ce:7a:49:05:d8:d3:6d:cf:d8:6f:45:ae:bf:5f:a8:2e:1a:
82:65:62:8e:79:69:67:f4:4e:2b:50:68:cb:e0:62:0c:cd:85:
e2:8c:1b:ce:56:72:71:8e:71:d9:6f:9d:6b:63:0a:78:b9:ac:
f3:dc:2a:8b:75:8d:65:ed:87:d0:dd:f3:b8:a4:b2:8b:51:d1:
e7:48:68:84:54:b7:f4:3a:a6:47:7f:36:8a:3e:5a:02:e9:bd:
5a:ff:a8:10:18:ba:08:77:62:2c:8b:fe:c0:4b:c9:de:40:08:
f5:c0:35:3c:cb:8d:4f:a0:96:7e:1d:69:a1:13:e1:cf:21:99:
89:b6:87:16:4d:ae:a4:d3:15:42:c1:ab:81:0b:a9:83:af:bc:
51:bd:b9:12:0d:22:c9:cf:de:0d:ec:6c:a1:9c:6c:ac:a0:0e:
db:4f:9e:b9:f5:ef:a6:08:e2:4e:0c:75:f2:62:f9:9b:47:ba:
77:06:6b:c1:f5:7d:f4:ea:72:bc:f8:9d:6e:07:46:8e:74:38:
c4:4d:d4:de:c5:63:24:0c:3d:41:4c:0a:04:6e:d0:53:f1:65:
e2:5b:e2:51:d2:3b:78:03:ab:14:a3:73:e3:ae:db:91:d3:86:
79:dd:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:09 2025 by rpki-client