Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/548d98dc-96b3-34fb-8989-d266f1becba0.roa
File: 548d98dc-96b3-34fb-8989-d266f1becba0.roa (raw, json)
Hash identifier: Ax4SHj41XiihKkeFNBWJUVk/LYQ/9HKXt6U2u1h9lic=
Subject key identifier: A7:71:D3:FD:16:14:A9:E4:41:25:2E:FF:D3:E9:CF:83:37:E5:B6:ED
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0016CF455609692C87E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/548d98dc-96b3-34fb-8989-d266f1becba0.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 35688
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:01:6c:f4:55:60:96:92:c8:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=3a937dc0-d883-4375-8bfc-41ccbbe8acea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:30:81:69:c8:ea:fc:71:bb:18:50:d7:14:
f7:1d:75:8d:7a:95:88:cb:f5:21:51:97:7d:df:bc:
d4:ee:48:5e:6b:55:15:a5:9c:a7:d9:46:d7:bc:58:
31:24:8c:4a:cf:fb:cf:8c:94:af:cc:58:5d:ab:94:
2b:50:9c:54:fa:3d:1c:af:80:37:45:61:e1:76:fd:
66:d2:ec:99:ed:66:1a:86:3c:f5:47:82:e0:ee:70:
2b:9d:82:49:77:43:cc:5e:ea:20:54:d5:65:e3:78:
81:6e:bf:0f:c9:1f:66:34:5c:92:1b:33:7a:9d:e5:
fa:fc:ab:17:a3:74:7f:2a:95:30:b2:3c:a5:f2:e1:
98:74:8b:f1:e6:e0:26:a9:d8:ad:cb:90:39:51:71:
61:3f:11:f8:34:28:c0:3a:12:97:06:a3:e5:50:2d:
cb:6b:83:89:20:02:72:4b:01:fe:90:f5:08:0a:57:
a4:e0:eb:55:d1:b3:e8:b0:1b:31:39:6d:e2:e8:41:
04:c7:10:7e:34:6b:90:4c:4e:a4:a1:19:a6:d3:82:
d1:cf:c6:a1:5d:d7:ae:57:21:a1:b0:a8:b4:9d:ca:
36:1c:0d:ab:b9:de:28:78:47:02:9b:51:e9:b3:9d:
2f:ab:f9:ce:83:df:92:4e:50:88:6f:a4:3e:7c:cf:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:D3:FD:16:14:A9:E4:41:25:2E:FF:D3:E9:CF:83:37:E5:B6:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/548d98dc-96b3-34fb-8989-d266f1becba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:3a:85:6d:3e:a6:e0:e6:93:c9:d7:0a:94:38:a3:6f:04:22:
70:ec:8f:d1:ca:e4:27:80:fd:ba:3d:42:ee:ee:b8:7a:1f:3f:
85:04:77:09:7f:5e:bd:e8:60:52:b5:eb:0f:39:9a:07:e4:88:
3d:7a:29:a1:3c:51:db:a7:de:99:5b:cc:83:d2:28:d4:43:f4:
2a:94:a2:eb:9c:2c:0b:3b:f1:4d:df:0f:04:54:19:36:8a:fa:
7d:f8:e3:54:57:77:85:22:55:a3:63:03:75:f5:fd:1d:27:71:
27:e0:49:0f:95:37:38:7b:14:61:bd:fe:36:70:b3:d2:6b:8a:
d3:3a:73:bb:a3:dc:5a:57:c8:af:0a:08:a6:d9:d2:dc:5f:91:
f9:e1:32:14:15:52:20:64:11:87:3b:f0:e7:a9:4d:33:bf:a3:
d9:20:2d:7b:18:33:12:6f:b3:6a:25:71:70:21:6c:da:c6:a2:
53:ea:3b:da:35:13:57:15:71:16:a0:08:2d:39:de:3e:4f:47:
d4:d6:1b:1e:09:2d:d8:db:91:f3:01:b1:b6:67:65:81:2a:95:
44:fb:bc:8c:02:73:0b:37:84:26:c4:e5:26:42:c1:54:7b:4f:
f9:1a:0d:c2:4a:29:ce:00:81:4d:af:26:d0:9c:a8:f5:8a:ab:
87:e1:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:02:41 2025 by rpki-client