Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bbf37e8-ac83-3663-9110-2dabf9db5c73.roa
File: 2bbf37e8-ac83-3663-9110-2dabf9db5c73.roa (raw, json)
Hash identifier: OXwPrCAuyj+S7LrUSAiBUnqa89J1IwCklvKxIKZVeag=
Subject key identifier: 72:B2:3D:8F:05:3B:9C:AF:55:67:BE:01:A1:1B:02:91:8A:26:8F:BA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0213CEA702C59E07006C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bbf37e8-ac83-3663-9110-2dabf9db5c73.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 212754
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:21:3c:ea:70:2c:59:e0:70:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=2ab53d8f-a35c-4ccd-89e2-0df849960986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:05:1d:be:68:d7:dd:d6:aa:4d:81:31:ff:
3b:fd:2e:5c:28:48:5c:39:0e:f4:ee:45:2d:b8:97:
a1:7b:64:c3:86:62:d8:6a:fa:6f:b3:2f:a8:64:87:
05:75:57:4f:62:d1:90:63:34:ce:78:36:48:14:1e:
10:a9:02:46:02:4e:58:18:ce:b1:7a:7b:d2:8c:e5:
bc:05:91:38:54:54:98:75:31:99:83:7e:b5:16:84:
0b:95:94:00:af:8d:49:f9:3b:b8:78:87:a3:2f:50:
fa:b7:88:64:56:7b:f3:b0:ca:55:e9:4b:1d:9d:2f:
46:60:1e:20:de:1e:2d:d4:0b:49:63:39:aa:4e:5b:
73:3b:5f:07:47:67:56:e7:25:9d:56:01:6b:90:36:
1d:fc:72:5d:49:1d:ae:33:2e:44:48:68:1e:bd:c6:
f2:3b:b4:3b:ff:3e:f2:e5:bc:9b:cb:74:f1:b6:37:
e3:0e:0a:ec:ec:c8:41:e2:a9:91:4e:f5:eb:70:7a:
ca:1e:b9:4d:00:62:b1:7c:89:3c:62:28:f7:c6:4b:
f3:8a:02:87:36:b7:20:0a:e2:79:12:89:ce:27:31:
21:14:6f:10:c0:1b:4d:9e:cb:b8:ed:d2:e3:98:53:
4f:bb:34:b6:49:1e:e4:2d:1e:35:42:8a:d0:81:e0:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B2:3D:8F:05:3B:9C:AF:55:67:BE:01:A1:1B:02:91:8A:26:8F:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bbf37e8-ac83-3663-9110-2dabf9db5c73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:99:0c:a7:7d:32:e6:f7:9e:9a:19:4d:fc:79:d3:f8:c9:55:
1e:98:3c:af:aa:44:93:e5:7e:4a:92:06:c9:fd:30:a7:a1:be:
54:9c:57:d5:19:ce:90:1f:34:b6:da:1a:be:35:33:c2:32:96:
0a:99:15:69:33:70:83:bb:7e:f8:33:f9:c0:7e:8a:07:37:1e:
92:f3:f9:22:4b:cd:0d:c7:14:fa:e7:be:00:2d:7e:0e:56:cc:
ee:46:56:05:52:bd:0d:f3:36:2e:87:c9:32:32:1e:a5:cb:fd:
ea:52:68:7f:0b:f2:91:b4:f8:99:fe:28:34:f0:7a:3c:dd:79:
b1:d5:a9:80:77:db:bd:ca:de:c5:f0:2a:ea:27:32:75:cf:d5:
5b:35:a0:4c:f9:b4:da:4f:ed:96:fb:47:dd:33:ec:7c:fc:da:
8a:02:13:a2:20:af:62:f3:ba:52:4d:c7:0a:3a:64:66:b8:cc:
69:9f:a1:74:64:7e:82:c7:cb:01:f9:84:5c:73:ec:17:14:26:
0f:f2:67:ca:a2:c6:bc:8d:30:b6:ab:6b:24:28:a0:b3:bf:4f:
ef:8e:22:94:73:1d:f2:a4:22:70:81:c4:c4:9e:c1:de:d1:83:
5a:fa:3c:3f:5c:86:9c:e7:0f:41:08:c1:bb:cb:21:88:70:37:
7e:89:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:18 2025 by rpki-client