Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa
File: 3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa (raw, json)
Hash identifier: WTRYGM4g5WfR6TFmxH3tWtQBkuUsHE+OoJBQYnymHzk=
Subject key identifier: CD:5B:0A:C9:29:D0:53:56:D4:80:B4:70:0C:CC:D0:35:22:35:28:F6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0049BB7764CB815865AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 21854
IP address blocks: 2001:470:24c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:04:9b:b7:76:4c:b8:15:86:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=160ad916-7ab0-4b4f-ab09-9fb74b3411b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:3a:f2:ee:a4:bb:5a:79:af:97:d4:0c:32:
46:b7:a7:e9:f1:04:92:7f:0b:06:92:2c:6e:72:63:
92:de:3b:ed:51:9a:2c:ad:47:0a:5d:ef:1d:52:b7:
54:9b:6e:45:8b:2f:2a:0c:56:fe:57:3a:0a:d1:66:
4a:68:bd:6d:a9:0c:ef:ac:0b:85:fa:31:b1:9f:8c:
2a:ed:f3:3c:70:7f:9f:fc:df:9d:e9:76:54:f2:3c:
55:4a:09:a0:17:b3:51:bb:cb:2d:ee:93:b6:6a:e8:
62:bc:e6:c5:47:ef:a8:2c:a5:bb:c7:2a:22:c2:9a:
9c:d6:fe:81:96:36:ba:5e:bf:54:f5:9f:bf:59:c8:
f9:9a:bc:5d:7c:45:46:6f:e4:82:83:7d:8e:7e:60:
6d:ac:a6:cf:7d:1c:84:ad:16:f4:49:56:b2:50:62:
73:a9:3b:55:07:21:87:1e:90:60:45:b9:b0:22:3d:
08:1b:64:2d:56:34:69:2b:91:c6:94:e4:4f:fb:58:
12:98:7f:22:10:d2:a0:0f:e9:48:31:67:a8:0e:6a:
5f:f9:3c:99:e6:6a:ae:f5:d8:91:18:87:3c:08:f8:
a1:0c:c4:18:9c:7b:03:5d:08:07:82:43:30:93:62:
bd:e9:0b:61:ae:c2:4b:c0:de:82:82:b7:09:e7:cd:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5B:0A:C9:29:D0:53:56:D4:80:B4:70:0C:CC:D0:35:22:35:28:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:24c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:e0:8a:df:e3:40:84:ff:6a:01:50:10:d9:f2:29:59:31:7e:
44:e1:04:3d:1f:ec:14:93:de:06:a4:33:2e:19:1a:ae:7f:03:
8e:e7:7c:d9:b2:8a:9d:71:88:24:db:45:40:46:e8:91:ef:b3:
de:20:8c:6c:f3:af:79:49:38:af:4f:fe:6b:28:d0:8f:64:4a:
68:8d:26:38:0b:38:1b:a3:6b:2a:1e:30:91:21:95:d9:67:4d:
ec:5d:16:20:cb:0c:ed:5f:0e:94:64:dc:6a:ce:1f:dc:98:74:
d6:04:c2:bd:7f:4e:25:bc:bc:85:dd:a9:2c:39:c6:cf:6c:23:
a6:ec:73:ea:f8:9a:2a:41:9e:70:a1:ee:6f:2f:15:cb:7c:46:
cf:d6:ac:13:fe:97:f3:15:2c:a0:3a:d8:ce:46:f7:23:2b:1e:
31:17:99:2a:05:47:1d:85:ea:a7:2e:06:1d:8b:d1:35:24:f9:
02:0a:4d:ae:84:84:1d:f6:ea:7c:92:b7:80:e0:34:e7:f0:04:
19:3a:42:9e:28:a4:87:28:a1:b8:2d:15:e2:6c:90:7a:00:d9:
9a:4b:c8:06:0f:31:41:c3:7b:e1:cd:10:47:cf:23:50:35:ce:
de:65:65:21:9b:ba:e0:50:a9:3b:18:42:22:48:37:04:0a:fd:
8b:a8:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:28 2025 by rpki-client