Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51237b9f-4aac-3268-bd76-5336a4223e04.roa
File: 51237b9f-4aac-3268-bd76-5336a4223e04.roa (raw, json)
Hash identifier: bCSqSkjXDhJyKVQ7OrPC+8gbfwAng2vc03WLGj/gX+w=
Subject key identifier: 9A:9E:42:2E:C9:76:14:91:E4:2B:FA:77:5D:94:D3:11:41:66:E9:47
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D000A11BC4B626E376AF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51237b9f-4aac-3268-bd76-5336a4223e04.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 215684
IP address blocks: 2001:470:a4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:00:a1:1b:c4:b6:26:e3:76:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=f43960ca-43d3-4624-9432-599e8fd10ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:ed:7a:0f:d7:49:99:29:4f:00:e8:72:75:
dc:17:24:d9:3e:3f:df:57:2b:06:13:a0:fa:d2:bd:
de:4c:ea:5f:53:a1:d4:e4:ba:0e:84:9b:60:89:3c:
0f:4b:65:6f:3a:8d:29:bd:04:4d:fb:0b:4c:1f:c4:
4f:68:78:3d:b4:de:a2:57:24:36:70:4f:8f:04:66:
16:31:29:4b:5e:82:8e:b3:80:85:7c:89:9c:6a:82:
87:c5:cb:c9:85:70:ec:a7:7c:af:eb:41:27:33:e6:
04:a2:00:18:3f:be:14:02:2c:7f:68:64:71:da:61:
e4:45:4d:e6:7c:ea:84:e1:0f:05:8e:2c:9a:dd:f0:
e5:f3:a7:05:69:54:a1:53:e9:01:4f:23:ed:ab:b8:
8a:9a:ab:8e:3f:ab:88:bd:41:f8:fd:05:50:d4:2b:
39:c3:8d:29:ce:64:9b:26:66:0d:79:2b:19:d2:6e:
0d:a3:9e:1d:92:1a:db:e1:56:88:21:4d:b9:ba:ed:
2e:26:ca:48:66:ec:67:72:bf:d7:ca:3a:c8:bd:21:
6e:00:72:63:bf:6c:bd:10:16:c6:98:e0:11:4c:e4:
11:e5:f1:a4:b4:4e:b6:11:39:85:38:e0:61:de:27:
2f:13:e2:af:92:b4:d6:79:f7:89:a7:b4:26:1e:1a:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9E:42:2E:C9:76:14:91:E4:2B:FA:77:5D:94:D3:11:41:66:E9:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51237b9f-4aac-3268-bd76-5336a4223e04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:a4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:71:e9:23:13:ac:3a:90:60:09:0a:cd:c2:25:07:a5:54:85:
df:4b:1d:e1:5e:b4:0e:bf:ec:4f:07:3d:fb:de:16:c3:3f:1d:
b9:98:1f:87:a9:a9:3a:8b:ee:ee:75:45:bd:c7:99:f5:8c:b9:
79:6f:44:54:42:e9:c7:b4:f2:bb:96:9f:11:a3:a8:7e:02:db:
65:8b:16:43:09:22:fa:b3:75:04:b4:1e:ef:6d:f7:f5:95:83:
5a:c9:fe:e1:eb:11:d6:4e:9f:be:b5:8e:1e:c2:67:6a:0d:9d:
9c:4e:6f:f4:72:d1:17:b3:5f:8d:82:a1:af:63:4b:9e:4e:c9:
b4:b8:50:22:d8:4f:9d:2b:d7:19:bd:62:4f:09:27:4e:07:44:
cc:95:98:7c:1c:6d:e5:b5:a6:3b:ac:1a:e4:b1:0b:a3:a7:36:
02:50:31:fc:86:8e:11:32:1e:fc:95:03:67:c3:5a:48:e4:5b:
86:64:2e:8a:41:81:af:c3:80:10:4f:0b:fc:f2:87:8a:1a:39:
64:51:78:57:fe:58:39:0f:34:a1:43:b0:ba:14:ad:51:eb:23:
c1:66:fa:d6:82:c6:4d:0b:24:e4:38:0d:57:7d:08:cd:28:92:
e5:00:ee:7c:e3:8a:92:63:7c:03:5b:5d:25:37:1e:4d:5f:b9:
50:37:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:30 2025 by rpki-client