Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa
File: 539d8fb8-7def-3a33-8209-7937a9a22bae.roa (raw, json)
Hash identifier: O7kou2mpbEIIRGTS50DldqfEsHRtNs7KbBu9ZkNiLpo=
Subject key identifier: AE:27:A9:47:5E:EB:B2:E7:C2:9C:7A:8C:14:69:07:72:DA:2B:3B:CD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFCDFF855DD7C32225FC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 62206
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fc:df:f8:55:dd:7c:32:22:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=5cc8e7f2-34ec-443f-998d-4b195fcb03d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:9d:33:78:c2:74:e4:9c:ef:4d:1e:10:b7:
9e:17:1f:3d:66:d2:60:2f:5f:28:8e:0d:15:19:04:
b1:ee:91:ff:aa:70:7a:e6:ea:af:4e:69:1b:52:53:
0f:0f:3b:bf:d1:d6:19:b0:f6:07:4e:e3:f2:4f:83:
9f:fc:0e:41:34:79:aa:ed:ed:80:d9:e4:19:e2:2e:
ee:91:44:0b:fd:34:d5:d2:83:c0:b4:f6:85:c7:c0:
c4:b9:30:29:bd:2d:df:b3:6a:e4:1d:9c:7c:8d:bf:
44:53:13:4c:7c:5d:36:ca:57:94:47:40:51:3d:8c:
35:3b:c4:c9:8b:6f:9e:e7:b7:bf:6b:51:46:d8:2b:
cc:f5:c9:79:69:71:a1:55:ea:bd:bc:bc:55:27:66:
67:c5:19:bf:00:35:9c:fd:d7:0e:2c:44:15:74:6f:
b5:de:2a:9e:6f:65:2f:53:8d:35:5e:af:26:98:5f:
62:e4:79:4c:d2:42:a5:25:15:ed:7e:d7:36:38:d5:
b8:ea:c4:11:56:42:d1:62:80:5d:7c:79:0e:e1:7f:
68:62:92:e2:79:42:62:84:11:72:94:40:42:c3:6c:
d4:71:eb:7c:62:c4:4c:5c:de:85:30:9f:b8:46:e5:
29:b7:f2:8d:52:46:61:bc:45:d3:6b:f4:ce:6d:b3:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:27:A9:47:5E:EB:B2:E7:C2:9C:7A:8C:14:69:07:72:DA:2B:3B:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:4e:21:64:5e:95:ed:5e:c4:fd:41:d9:75:17:26:21:a7:8d:
d2:e7:44:10:db:33:8d:1e:38:57:fe:40:8f:8f:f5:d4:35:f4:
29:aa:01:9e:7e:00:0d:0e:93:fa:a7:6e:c1:38:6b:81:3d:7a:
ce:e4:ae:c3:08:d4:66:66:27:6c:24:2e:05:5b:8f:f5:52:36:
54:70:d9:c0:77:6d:44:73:77:48:1b:dd:83:fd:5e:d3:f1:83:
0a:a1:0e:a2:8a:2a:23:c4:7f:b3:7d:a6:3b:06:6f:c4:d2:27:
68:63:6f:b3:84:f6:af:bd:f8:39:99:9c:f7:1a:f0:c7:82:d9:
1b:91:53:b0:df:74:84:68:ee:cc:36:8f:94:22:de:0c:50:b5:
30:23:3a:21:55:8f:3c:91:86:83:f7:fb:9b:5b:88:98:9d:a1:
3d:31:97:23:94:24:ff:6a:cf:59:4f:d5:1c:33:8c:cf:1d:d0:
3d:c9:d2:3d:fc:b6:26:f5:aa:ab:39:1e:35:c3:85:1b:c5:b7:
4f:23:b3:e5:d2:3d:b1:1a:e9:4f:07:8a:22:19:e8:5b:0f:78:
4b:5e:f8:85:8c:17:24:b4:ed:1e:fe:8a:75:7b:0d:54:b3:69:
97:34:7e:b6:9c:41:44:7f:f2:03:c2:02:13:51:dc:e0:0c:dc:
18:2e:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:50:21 2025 by rpki-client