Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa
File: 5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa (raw, json)
Hash identifier: +D1utYibsZ4arECSUrlOIvg2PW0xySE9kGT5dqjCg3g=
Subject key identifier: 8B:FD:D7:27:12:C9:69:E8:27:C2:65:09:68:C3:8D:7E:F6:08:9D:49
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFC516A57FA07DFF53E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 206186
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fc:51:6a:57:fa:07:df:f5:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=4172573f-3792-4705-b5a5-7da6a65d8330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:9d:a6:f7:f9:3d:71:21:63:c6:28:aa:22:
68:72:6b:66:2c:0a:1e:25:d6:0b:c1:c0:3c:86:49:
89:fe:6a:f4:55:f5:c2:89:0b:35:76:ee:42:6b:71:
16:25:bf:be:22:77:67:a1:fe:57:7e:82:69:0f:d7:
c8:85:9f:64:5b:84:27:76:f7:66:74:f7:6d:36:d3:
fd:42:3a:09:97:95:20:f6:65:f3:5c:f2:5a:37:dc:
f5:fa:03:78:ea:6d:c3:38:ca:76:07:ba:c9:9a:e3:
78:57:c7:86:98:60:94:fd:a8:65:6a:3b:34:d3:fa:
4f:69:dd:c0:36:af:f8:54:43:6b:7e:fc:d1:26:83:
25:bc:82:e5:67:92:12:49:cb:ef:19:cc:34:ae:d7:
0f:ab:bf:6a:be:40:5c:65:cc:64:43:cc:03:f6:e3:
e6:6f:ba:66:07:ec:34:e4:cb:cb:4c:4e:d6:8d:ea:
1b:e5:fd:1d:47:b4:78:96:41:b2:12:23:a5:b5:c7:
88:a4:1f:7c:66:f0:03:59:b0:53:6d:e4:a3:b7:03:
63:e3:7e:fb:47:fd:c7:37:bc:7f:71:69:0d:16:73:
7c:37:ec:ad:81:96:f9:a4:c3:1e:32:d3:e4:e8:6b:
20:06:89:e8:ba:98:0e:5b:45:24:49:bc:54:b8:e8:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:D7:27:12:C9:69:E8:27:C2:65:09:68:C3:8D:7E:F6:08:9D:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:fa:42:b3:0e:65:e1:a8:b1:e0:c0:c3:23:75:98:62:e8:d8:
0b:00:a7:9b:c2:91:59:bd:90:98:4a:bc:a1:5f:f0:39:c9:e4:
92:12:c2:60:59:04:82:3f:33:83:72:76:93:0e:fa:55:94:a6:
6b:c1:40:d7:72:e3:bd:10:4e:05:c3:87:d7:06:ac:3d:2d:55:
4f:e4:f6:25:db:14:07:92:82:f6:5b:56:37:39:65:6d:0c:2a:
bc:40:e8:18:cb:42:8d:7a:d2:bf:92:07:57:c7:39:e7:94:9c:
2c:20:81:f2:e6:7e:7b:4b:88:91:e9:08:5a:77:55:8c:9f:be:
98:9b:95:e1:c3:62:06:e7:28:f9:b5:74:35:da:b0:4c:de:e8:
bc:48:49:87:68:fb:f1:51:b1:d5:0a:97:00:41:f7:52:2a:2c:
b7:dc:05:cc:9b:3b:d1:d1:27:c8:5e:6e:9e:a5:1c:1a:f5:c2:
4c:b9:50:75:69:a0:99:34:82:cc:7d:55:bc:a4:ab:b0:d6:e0:
52:d1:04:5b:5a:2c:2e:a9:cf:62:8b:99:2c:f6:6b:c5:3d:e2:
c2:35:d4:d4:bb:27:20:cf:ea:de:0e:7d:6a:3a:97:c2:30:a8:
2a:4a:95:b5:c1:89:2e:9a:0f:5f:f6:23:56:02:c9:34:3c:1e:
e8:d6:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:25 2025 by rpki-client