Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa
File: 3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa (raw, json)
Hash identifier: fgDK18PEmKaHo3va+FA6PjH4R2z2JeFh0OVVrpKILV0=
Subject key identifier: DC:36:4B:A8:CA:8E:63:5A:A1:28:61:0B:58:F2:0C:84:EA:B5:1B:B5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D000AD9B46333CFA6F0300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 215684
IP address blocks: 2001:470:296::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:00:ad:9b:46:33:3c:fa:6f:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=afffd428-aa93-4751-bd10-b6f40fc77ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:e4:81:dd:77:28:3e:96:c7:3d:9c:69:c3:
12:c9:d8:1c:4f:25:b7:d1:70:be:db:26:18:54:07:
bd:6b:6b:e3:68:c3:a6:bc:fc:7a:38:19:46:3e:36:
43:9e:be:9a:3e:5b:ce:d8:c4:5a:a9:19:4c:f2:ac:
dc:a2:5d:64:6e:6b:27:e6:05:10:ca:33:ef:8d:2a:
09:9c:66:64:af:b3:26:f8:ed:fc:57:a2:04:64:a7:
99:46:f5:72:94:b8:06:77:06:af:e3:63:0c:f3:33:
0d:75:23:4e:72:98:73:76:29:14:81:43:f9:15:32:
df:b1:50:8b:bd:8c:78:68:5b:b3:9f:79:c0:53:df:
db:df:8f:52:59:e5:30:51:f7:1b:a3:66:36:82:84:
4e:69:1d:55:b3:92:a9:96:05:f7:4b:c1:b7:3f:77:
ff:f1:2f:45:b6:6b:4b:6c:ce:ae:43:50:4c:bb:9e:
b2:2c:c4:9f:c8:26:8d:56:a7:99:41:35:d7:91:d8:
ac:d3:5e:30:c5:b7:ef:7f:6a:a8:ff:fc:8d:e6:18:
09:c1:34:79:f3:a1:13:db:7a:eb:a8:7a:a0:ff:75:
25:4e:41:e4:ca:12:7b:fa:dc:4f:78:25:49:2e:df:
b4:df:41:f3:b0:1d:b9:d1:84:d7:3a:d0:80:9c:aa:
9a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:36:4B:A8:CA:8E:63:5A:A1:28:61:0B:58:F2:0C:84:EA:B5:1B:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:296::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:09:09:e8:9b:bf:f2:b2:db:3f:25:eb:ac:b7:78:a8:9e:dd:
ed:12:0b:53:9e:30:76:59:b6:69:fe:4a:9a:31:fa:af:a1:38:
c4:43:28:5b:7f:36:55:84:f6:f5:d5:f1:de:c7:72:e6:d8:cc:
51:60:c5:6f:75:84:5b:91:3b:73:1c:36:42:8d:d6:2c:50:d6:
92:ab:06:ba:f7:2f:a3:5e:52:68:85:f8:65:90:04:6e:01:6a:
94:a2:68:01:98:73:d6:e5:41:d8:b6:23:2f:f1:40:75:c4:df:
70:05:64:5b:b8:d3:a8:22:4f:63:d0:af:b7:e0:e7:41:79:db:
32:fc:75:91:6d:19:81:4d:5c:75:57:ad:25:6f:0b:2a:ce:eb:
7e:b2:52:48:52:85:2b:86:4f:c6:e4:c7:29:05:54:8a:d1:57:
1a:4b:38:39:fb:87:a2:f2:0b:c0:20:67:c0:a3:1e:67:bf:41:
58:90:4e:38:b8:6c:76:74:84:d8:f9:08:21:fc:8e:54:86:1e:
09:1f:ce:4d:ef:e9:86:98:7e:00:e3:5b:8f:37:0a:ac:f6:c1:
22:16:e3:fd:08:79:09:fb:e7:c5:ab:e2:4c:c2:c6:38:e8:04:
26:44:50:43:0c:fb:1a:df:68:a2:47:02:b9:30:d7:60:ea:a5:
42:98:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:53:51 2025 by rpki-client