Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa
File: 4d56da04-c6ac-3625-ae32-26c688e9b28b.roa (raw, json)
Hash identifier: Pm49EMBnY8zQwihhsBPJw/EsV2I/ZXyhZz3gAofmzPU=
Subject key identifier: 21:03:08:E8:91:1E:97:F7:A2:8E:10:44:18:DF:0E:7D:D0:25:0B:8E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01943EE21AE30AD7E4380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 31942
IP address blocks: 2001:470:21b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:19:43:ee:21:ae:30:ad:7e:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=6fe8ffc3-abd5-4c7a-9aaa-987e49488425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:b9:a4:e0:b8:1c:e5:12:49:a8:fd:67:86:
eb:ad:e5:f2:51:65:e8:8f:91:f5:b4:47:54:28:d0:
c6:73:13:2e:29:11:c9:bb:c3:b6:3c:25:6e:94:be:
0d:f1:be:d9:6c:46:71:53:72:5f:9a:ba:4c:87:6c:
8d:9f:d6:ca:a0:56:6e:ce:c4:34:cc:02:5c:b6:82:
03:6c:1e:5f:1f:4e:60:60:ac:eb:60:82:77:b8:04:
0c:60:c4:d8:2e:6f:60:d7:79:75:f4:49:de:d2:9e:
b6:3b:e7:19:f0:2e:ce:00:7c:56:de:38:f1:f5:b8:
0f:03:62:57:4b:52:5a:d7:7e:f8:ab:a9:7b:12:ac:
72:3d:8e:56:db:b9:f9:65:7c:f4:38:66:b7:84:66:
bd:d9:a4:a3:cd:ce:dc:cc:c8:8c:6c:ea:b5:81:50:
5e:de:9e:c1:19:df:12:8e:51:20:5f:23:55:3d:e2:
2d:45:9f:ef:91:e8:2e:d9:4e:64:e0:2b:79:1a:d4:
ff:8d:d2:11:67:39:23:40:3f:ca:9d:1c:32:2e:67:
93:d1:09:59:29:ec:93:12:a3:0e:8a:32:8b:c8:cc:
95:37:d3:bb:cf:fb:3f:8a:37:bb:78:f3:8b:e0:ca:
71:94:1c:63:63:2d:ce:4d:01:52:90:58:0c:6d:83:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:03:08:E8:91:1E:97:F7:A2:8E:10:44:18:DF:0E:7D:D0:25:0B:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:21b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:cf:d3:8e:b8:e7:9e:6a:0c:92:bd:28:02:60:62:bf:92:f1:
ce:b5:18:66:bc:44:5b:80:04:ac:c8:f6:aa:4b:b9:ee:5d:5b:
08:34:9b:90:d1:74:c4:8e:9b:0b:d0:71:62:51:2c:af:9d:6b:
ea:c8:3e:64:b4:7d:35:d1:e6:53:69:e3:85:18:0b:d7:6a:85:
0e:a9:41:21:86:00:7e:a5:fe:85:0a:0e:3c:1c:6d:e3:ae:a0:
fb:73:31:7a:46:78:2e:c0:d2:c0:0d:ba:f4:b6:76:74:1e:2c:
e9:bd:c7:ff:07:d7:20:6f:f0:e1:b7:9c:3c:1e:a5:31:1b:24:
37:59:28:9e:f6:ae:d1:48:76:c4:e4:e6:2f:ec:5c:33:9c:87:
fb:32:a2:fb:8c:f7:45:13:13:cb:64:5d:8c:c1:ef:ea:55:0b:
9b:9f:a9:32:5f:17:3a:5a:bc:61:ac:ec:c0:22:91:44:d6:84:
08:4a:4d:7d:ea:3a:61:7a:8b:d6:0f:dc:a6:8f:d6:db:ee:08:
90:e6:66:f5:be:b7:95:28:b1:0f:91:61:77:6b:23:b9:7d:bb:
23:14:54:f6:73:bb:3e:3a:6d:60:65:fd:94:91:4d:2f:b9:1f:
1e:cd:9f:be:52:73:c7:28:b4:e2:81:44:cb:b3:83:67:85:57:
94:95:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:00 2025 by rpki-client