Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
File: 90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa (raw, json)
Hash identifier: jzz2zvsEtq5PIAYcI7n3DuM6TjcMdA7iqzoNMfFifq0=
Subject key identifier: 00:7A:8B:43:1F:08:12:2F:B3:39:7B:09:DB:EC:55:11:0D:53:61:15
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00597CAD23F80C06DC980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36902
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:05:97:ca:d2:3f:80:c0:6d:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=9d62ad85-adb5-4473-b3c8-3e223be765d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:13:62:c7:c8:60:f9:24:df:11:03:dd:be:
b9:23:f8:44:9a:65:e4:39:9c:58:71:62:bf:9a:4f:
6b:d3:12:51:27:c7:58:43:d5:78:8a:9d:65:e5:9f:
7f:da:62:7a:11:fe:5e:3b:d1:ac:c2:fd:df:ed:c8:
55:f2:a4:85:7e:90:fe:8b:a3:de:1b:ab:e0:b9:aa:
a4:ee:e3:fb:73:31:f9:5d:a8:6a:44:69:08:6f:83:
6d:71:3c:b6:4c:d4:37:78:94:35:56:f5:66:eb:3d:
5c:11:ef:74:32:f0:d5:25:b9:19:dd:ea:f2:1a:f6:
5e:b9:e6:5a:1b:b3:36:ad:49:d1:96:70:1f:54:a5:
2a:0f:a0:eb:e6:40:43:03:88:d3:d8:c7:a5:73:bb:
47:21:16:e9:cd:44:c4:7b:8e:48:e2:c4:2c:e4:b6:
37:f1:5e:ff:3e:8a:ad:5e:31:92:e3:a0:18:e0:34:
77:ab:a8:fe:92:05:f0:43:78:8a:0f:36:26:ac:c0:
62:31:4b:e5:cb:01:03:8e:85:f0:d6:74:60:4c:78:
d0:0d:81:ed:1f:80:d2:67:29:52:96:72:41:bd:30:
9e:0a:af:dd:e7:4b:7e:af:6c:1c:a7:95:de:db:82:
08:4d:b4:79:2b:f1:27:c9:f6:38:1d:2b:29:c0:68:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7A:8B:43:1F:08:12:2F:B3:39:7B:09:DB:EC:55:11:0D:53:61:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:91:38:ad:9b:bb:70:a5:e7:1c:f8:d3:0a:8e:1a:da:64:11:
92:34:9d:5c:c9:23:b1:b4:56:31:53:5d:22:9d:c1:f0:1b:70:
12:d0:7b:09:a3:59:13:3a:b5:8c:81:80:88:da:09:65:3b:83:
d7:cd:b8:8d:5b:09:58:79:00:8b:7c:db:43:63:af:71:cf:9e:
73:4e:dc:81:c5:ad:7e:2e:7b:57:be:b3:14:54:a2:27:b1:c3:
a4:78:5e:6c:52:96:39:3d:b6:f4:8f:5b:dc:0d:e0:a7:28:39:
ea:cd:89:3e:82:1e:50:8c:c9:d3:0b:c0:7c:4c:14:02:e0:9a:
7b:dc:1b:2a:21:70:b9:16:94:b5:7e:22:f7:5d:43:00:f1:2e:
f3:c7:3c:61:16:bf:53:de:3d:35:6f:c8:e3:ab:7f:50:31:b4:
52:2c:9e:1b:ac:08:56:ff:1f:e0:71:8f:5b:43:32:e4:db:44:
a9:a8:ce:5c:ea:a6:c1:31:bf:f6:cb:26:5d:3a:68:b7:a8:3b:
55:57:8f:e0:8e:8c:27:a2:04:68:8c:ea:f7:f4:d8:f3:51:6e:
7f:0c:a3:c1:74:00:e2:3b:8d:ca:80:5e:47:81:19:ea:0d:25:
e8:95:56:f9:a3:c5:55:f4:56:13:ab:85:93:a6:20:ce:75:3d:
8b:9b:31:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:03:53 2025 by rpki-client