Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d208335-d6d4-33c8-ba28-ed144153a1fc.roa
File: 8d208335-d6d4-33c8-ba28-ed144153a1fc.roa (raw, json)
Hash identifier: 62lT2yvHvNuL3VsvAyEQMpGUTxwraKYs9FowU92Wrb4=
Subject key identifier: 88:73:07:CB:25:B2:F6:DD:7D:D1:0C:43:9A:86:97:B5:9B:D5:CD:F6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D014721E04A5E7624E8B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d208335-d6d4-33c8-ba28-ed144153a1fc.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 46925
IP address blocks: 2001:470:1ea::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:14:72:1e:04:a5:e7:62:4e:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=98a414a5-c4e9-4633-b631-72796459ad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:db:ed:ee:9a:f3:52:e4:39:91:8f:e7:86:
bf:05:57:dd:c5:76:66:c3:4d:4f:bd:12:ac:94:9a:
b1:46:73:fb:f3:1c:40:17:19:9a:27:dc:f5:91:a3:
13:14:21:f5:55:e1:07:25:d9:36:ff:9b:68:12:d6:
7a:57:eb:59:2b:47:f8:90:28:ea:5d:f4:0b:ff:b6:
e7:c8:cb:07:9b:9f:03:69:cd:ac:28:90:c5:5f:48:
dc:66:17:51:56:b3:cf:18:21:4e:7a:38:61:ee:a6:
6d:c6:bd:61:29:9c:12:7a:1e:20:a4:f9:63:fa:b7:
b7:52:3a:74:02:ca:53:06:2c:fe:17:55:91:c8:97:
c8:07:6a:2d:26:a0:a4:66:7c:6d:93:a6:df:8d:97:
87:7e:a9:65:1c:8f:c9:a0:2c:07:34:61:2e:74:3c:
57:fe:02:1d:31:92:10:e1:39:72:af:20:b3:e9:0b:
5c:4d:d0:e5:8c:76:22:b0:f4:1d:73:a1:a7:64:8c:
56:d9:57:85:32:51:15:f3:84:1b:d1:4a:e5:9f:61:
6d:44:ec:04:78:1f:4a:c5:4d:2b:5d:e6:2e:7d:09:
30:b8:f7:a9:02:11:ec:a1:e0:6e:5b:b6:fa:f8:c9:
29:41:06:cd:8d:8d:e6:67:06:cd:a4:ae:7f:5b:89:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:73:07:CB:25:B2:F6:DD:7D:D1:0C:43:9A:86:97:B5:9B:D5:CD:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d208335-d6d4-33c8-ba28-ed144153a1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1ea::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:c3:5c:af:3b:4b:c2:3a:70:7f:6f:66:e1:40:2f:8b:10:8e:
a6:3e:c3:a6:1f:62:81:16:0a:3c:9d:2e:02:eb:3e:d7:d2:83:
32:7e:f1:79:4e:66:29:c1:40:f5:e9:e0:0a:ac:08:73:00:fc:
f1:05:23:74:1e:6d:7a:b4:c3:55:ff:8d:66:6c:28:a6:59:1e:
91:af:1a:fe:37:21:34:60:0a:fe:d5:68:71:52:0b:c0:91:0b:
9f:f8:2b:03:0b:60:5f:68:9a:37:97:89:e2:bd:63:3e:84:89:
77:26:79:c7:97:94:9c:f6:3d:9b:27:ed:7a:d3:73:48:d7:5f:
90:56:ab:b5:a2:69:7d:d6:9f:fe:70:13:90:82:ad:c5:39:4d:
29:70:b6:5a:0c:74:ee:ea:97:f2:30:e5:69:11:1f:1a:82:9c:
9c:c0:21:e1:e1:53:9d:90:a9:a6:76:60:a0:29:9d:01:7f:e5:
9b:72:8f:63:be:27:e8:d5:e3:70:64:83:67:66:85:3d:5a:80:
4f:d0:26:9b:d5:3a:53:be:b4:53:18:f5:1e:87:ab:ef:1b:97:
2c:4b:91:55:af:56:f5:f6:41:f8:2d:cd:ca:46:de:87:aa:5f:
ad:60:52:5d:0c:cc:e4:ff:d9:2f:85:72:69:e1:da:eb:74:10:
24:a6:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:58:37 2025 by rpki-client