Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa
File: 89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa (raw, json)
Hash identifier: 3imVtNkF1AHSbBoX4SovRsLWffTGGMz94el1RRGNlX0=
Subject key identifier: 23:A6:CA:B7:45:78:EA:E0:2B:6F:28:6D:77:FB:C6:8F:F2:93:39:6A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF4ECEAE6836C50CCD2C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 63370
IP address blocks: 2001:470:8d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f4:ec:ea:e6:83:6c:50:cc:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=ae8e9022-55ff-49e6-9a81-ae007ea424e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:71:e2:cf:77:bf:81:a9:e8:44:89:d7:41:
19:c3:9e:05:fb:40:b2:73:0e:39:89:76:d3:55:65:
40:57:5f:64:53:63:33:d9:1e:50:42:31:2d:ef:84:
8d:e8:81:47:c9:b5:48:15:90:5b:52:f9:6b:f1:66:
69:ad:dd:87:0e:ab:a0:9f:bb:e4:22:9d:5f:7b:f2:
70:c4:2e:26:e8:c0:89:55:fa:db:67:98:d3:c5:c8:
58:77:82:92:86:26:c2:e9:00:72:97:28:f0:52:e1:
f7:53:b5:d0:b9:9b:68:3b:e2:4d:01:2f:ac:5a:37:
fe:18:b7:27:06:00:86:a5:cc:41:ac:8b:46:19:84:
4d:b7:72:47:ea:6f:27:4d:89:85:84:9a:39:dc:19:
90:3f:3f:04:7b:8a:cd:10:46:94:ca:76:d4:a1:05:
a1:9a:b2:0b:81:d7:18:10:62:23:88:77:40:ca:dc:
bc:3f:65:f8:a9:9e:cd:cc:bb:77:b3:90:3f:a0:60:
98:7b:cc:2e:37:86:3c:0a:61:7e:0d:73:80:84:79:
5c:48:33:62:fa:a7:c2:5c:2a:22:bd:29:ca:af:99:
78:b9:47:40:60:73:c8:b9:32:92:09:53:d1:80:48:
60:73:48:9b:e9:03:c1:86:c5:2c:ab:5f:f9:98:0e:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:CA:B7:45:78:EA:E0:2B:6F:28:6D:77:FB:C6:8F:F2:93:39:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:8d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:e3:b3:8b:f5:30:d2:66:6c:11:e0:16:98:f1:12:5c:63:7b:
05:6e:32:f1:7c:71:c2:3d:66:04:53:1f:38:9c:66:53:46:b9:
f9:2d:53:18:76:ca:54:ec:43:81:c1:ef:4f:78:04:fe:0f:7d:
9f:f7:a2:58:3d:86:1b:f1:70:57:45:8f:5e:a9:b7:49:09:27:
61:d8:16:ce:11:9f:bd:4d:7e:af:8d:3f:fd:d5:78:0b:87:8f:
f9:01:6e:0d:0a:1d:b0:96:de:89:8a:ff:fd:55:c0:d6:47:33:
5c:65:91:f2:32:ab:e1:1d:d4:f7:cd:a4:42:bd:3d:f9:53:38:
34:c1:34:b0:34:24:f4:18:b6:ba:e3:c5:a7:e0:87:5c:5e:a0:
78:e3:76:27:40:5a:a7:82:84:81:e3:5d:05:8f:43:b9:56:23:
f3:31:93:64:b0:47:59:1a:f8:21:bf:92:28:61:bc:f8:0e:73:
36:a7:e5:be:32:e1:12:ab:b6:94:5e:21:60:bc:80:23:e0:be:
9c:ef:9f:d1:41:6a:ca:7a:16:42:20:17:61:4f:0c:34:3b:9d:
13:03:0c:5c:7b:fe:66:13:f8:c9:51:1f:a1:2a:ab:ba:7c:0f:
33:77:b3:52:29:73:aa:95:af:05:41:da:e8:c7:f2:26:92:38:
3e:5f:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:06:27 2025 by rpki-client