Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa
File: 844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa (raw, json)
Hash identifier: ylpyYQ9+K7R8n03GoJpURgYI23R8m2oJaS+sEwoYpZA=
Subject key identifier: F6:40:E5:19:B1:DF:FD:A2:75:93:80:63:6B:7E:49:4E:0C:3A:78:F3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01C004FCBBE75136ED300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 151374
IP address blocks: 2001:470:b4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1c:00:4f:cb:be:75:13:6e:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=b8b44b5c-c315-464b-827b-f370880dca9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:fe:11:02:47:a3:2f:e8:97:10:31:98:5e:
64:ee:d8:57:f5:01:db:95:36:3b:e5:62:04:12:96:
ea:4c:ac:8d:80:b2:9b:32:d1:7b:de:38:cf:cf:e9:
15:ea:59:2e:b5:48:48:a6:1b:6f:e2:cd:6a:bc:f0:
9d:80:c6:7f:d8:aa:ac:a7:c9:0a:7d:a5:d4:b1:54:
7b:5a:e9:4f:22:b6:51:2d:f4:5d:af:0d:21:8b:30:
a9:2e:c8:cf:eb:b9:e8:e1:75:64:68:e4:45:a7:b2:
48:3c:01:b8:1b:c6:30:07:3f:4f:36:50:6a:d1:2a:
c3:fe:0c:00:50:46:44:6b:50:09:5c:06:84:14:b4:
d5:50:28:69:2f:dc:06:21:42:80:8c:e5:26:fe:e3:
b3:7b:48:d8:89:d6:8e:b9:9c:21:e1:13:c7:7e:af:
46:cd:ea:1f:e8:f8:a0:3a:44:60:ba:c5:c2:cd:a1:
57:55:29:8e:fe:be:5d:12:22:7f:aa:34:40:e6:76:
a9:d5:b0:66:ba:79:22:0a:fe:a8:f8:5d:23:39:a8:
35:8f:45:e8:5e:a1:13:7d:18:b4:2f:09:bf:de:69:
96:de:08:8e:ef:0b:11:df:54:1f:fa:a3:33:19:0e:
21:13:d6:50:e1:98:6d:88:50:23:ef:64:56:16:0e:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:40:E5:19:B1:DF:FD:A2:75:93:80:63:6B:7E:49:4E:0C:3A:78:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:b4:76:d9:1b:89:37:39:01:fe:cc:dd:dc:65:51:74:11:bd:
56:5b:7e:fe:94:8e:a1:2d:8d:4c:8f:05:7e:da:a5:f7:1c:be:
3d:49:1a:f2:9d:3a:96:5d:e7:7f:dc:f5:00:79:bd:c1:73:24:
2b:7c:0d:df:34:8f:a0:54:7a:da:6d:6f:63:c7:d4:de:c3:08:
78:6f:d0:e1:ac:78:34:d9:c2:6d:f9:12:31:98:65:42:b0:e5:
50:46:92:85:d6:39:1e:4e:2d:51:8a:0f:5c:cc:58:5d:04:bb:
bb:ae:51:ba:12:ae:a5:44:24:a2:ba:2b:99:3a:ac:49:b6:bf:
58:c1:b0:68:f9:fa:eb:36:44:d0:09:3a:c6:f8:1e:a2:2b:a7:
b0:33:d3:d0:f8:d4:5e:d0:58:55:7d:76:7f:03:bc:8a:f3:1a:
67:8a:91:cb:ef:89:3d:c3:6e:19:a1:56:61:3d:0e:8f:d6:90:
b7:b4:54:93:a1:10:58:72:b1:e5:a7:2b:5e:8f:65:f6:a0:28:
73:86:36:fe:a1:12:16:b9:27:c0:98:3a:be:1c:75:91:58:a6:
7f:7b:75:95:2f:e2:fb:ed:d1:67:f5:6f:f7:d9:01:69:90:c5:
dd:f6:d9:6c:76:f0:0f:eb:e9:56:b4:69:0e:45:61:d5:a1:de:
76:e2:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:02 2025 by rpki-client