Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa
File: 853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa (raw, json)
Hash identifier: COVeV7Un3YStdCHcC9lYiJnrkg9PG46RGP4DsBNmvTw=
Subject key identifier: E5:E2:93:5D:6D:A8:71:B3:76:00:3E:73:13:2D:AF:0E:03:8E:71:3E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0192C0F0EBE2CF42E22C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 46506
IP address blocks: 2001:470:211::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:19:2c:0f:0e:be:2c:f4:2e:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=0cc53eea-e199-431b-a971-a09bf021469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:54:5a:82:e1:a6:96:13:8d:8b:23:a9:e6:
b1:ef:63:82:cd:f8:49:d5:b4:eb:f1:2a:6d:75:03:
8a:2e:59:8e:7f:e3:0a:2f:4d:d9:df:aa:41:dd:0a:
4f:0e:06:54:49:ca:4d:65:79:03:9d:39:a7:ec:fc:
12:77:27:da:d3:fc:d6:1a:e9:b6:76:ba:3a:06:8f:
a4:6f:59:5f:80:76:1b:d8:23:a8:9b:d7:55:c6:b7:
f7:86:0c:8b:67:9f:c0:aa:54:7e:51:c6:3a:7d:12:
b8:b3:71:98:aa:63:f7:cb:12:e1:03:0e:95:f7:9d:
51:23:68:86:dc:27:00:71:da:38:a5:03:43:c9:64:
2d:be:d1:0f:9f:45:b6:79:c9:5c:be:10:dd:c6:d2:
7f:7a:79:15:8b:45:2e:56:41:f7:77:cd:76:66:44:
ad:b0:3f:50:e9:22:3b:1d:5b:2a:3d:86:c4:39:d4:
db:82:d8:d5:0b:86:f2:e2:c7:50:9b:0a:b7:c7:c7:
f6:ed:90:75:29:99:51:62:66:d0:2e:32:e2:ba:91:
9a:d8:0a:55:83:64:3e:19:4e:46:a4:2a:60:1c:22:
34:cc:01:34:2d:0f:b2:e3:12:b0:d6:74:71:79:5d:
6d:f3:74:f5:6c:37:ab:04:cb:8b:20:7c:f0:d5:0b:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:93:5D:6D:A8:71:B3:76:00:3E:73:13:2D:AF:0E:03:8E:71:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:211::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:1a:d1:51:1c:7e:0f:87:14:85:10:85:5a:8e:14:2e:70:c9:
eb:82:07:dc:45:9d:b4:b8:ed:57:cb:c1:3f:69:42:f6:f0:f3:
41:e0:35:e3:87:71:d3:7d:d4:39:b7:d4:14:36:a2:bd:17:2c:
e0:6d:42:dc:0b:57:67:13:08:68:ac:86:bd:89:48:60:8c:b4:
59:5a:f9:68:ee:7a:a4:c5:7c:80:fe:f0:52:26:34:ac:ad:70:
19:b8:2d:d3:c7:e6:92:67:96:17:7f:1f:e1:47:28:c1:11:f5:
e2:f2:71:0b:68:71:5d:bf:a8:e3:e9:ac:c7:cc:fa:af:38:03:
bb:3f:a9:9f:7b:36:1d:68:3c:b0:a0:ea:02:61:3b:16:6f:cf:
53:f4:40:d6:68:81:b9:0f:e8:fa:e2:1f:1d:8b:6a:5e:cc:1f:
57:53:c8:ab:2b:55:c3:67:05:7f:36:f0:d0:1d:ff:b9:51:cf:
39:04:f0:d7:fc:3f:1d:25:70:16:af:fb:1d:b4:15:43:1f:db:
89:c9:a3:fe:2b:28:42:75:28:a2:01:f9:0a:5e:5b:d6:e0:47:
5c:3f:c9:51:fc:06:04:a0:79:62:41:90:4b:43:7b:9d:bd:38:
ea:07:5b:78:e0:f4:25:81:a5:22:2c:ba:77:f1:08:41:47:b3:
c2:2c:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:28:00 2025 by rpki-client