Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/947af4f1-5ba2-3829-894d-febe54856a1d.roa
File: 947af4f1-5ba2-3829-894d-febe54856a1d.roa (raw, json)
Hash identifier: PBHXc4nxwuoeF6Q6ipvRh7/cIL10RXGnt5I3u7dDEBc=
Subject key identifier: F4:F0:D1:82:F2:80:0D:54:94:8C:D9:6C:86:73:7C:9C:44:94:41:53
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF19A639204F0E1BC4300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/947af4f1-5ba2-3829-894d-febe54856a1d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 394680
IP address blocks: 2001:470:b6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f1:9a:63:92:04:f0:e1:bc:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=af6c194d-e329-4be9-9c04-1e2120177cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:76:41:a0:03:69:89:2a:03:70:18:a4:1b:
94:ba:4b:f9:b8:b4:ee:c9:27:df:06:ff:e2:05:85:
71:6a:08:27:d0:3b:17:58:71:45:ef:b0:af:e2:8d:
05:92:13:43:a5:bf:ac:93:62:1f:6c:20:d0:31:71:
96:8a:1c:9a:85:b5:cf:d3:a7:e7:20:77:52:17:39:
38:6c:db:df:23:ea:0c:50:cb:4b:e2:10:f0:27:29:
f4:d4:e9:f7:a7:23:c4:1f:35:71:28:7d:69:d6:d0:
5b:f6:8b:e8:4b:76:9e:fd:63:8d:86:bd:b4:fe:a0:
19:89:4d:14:5f:4c:3d:3e:31:1e:be:e9:d8:77:88:
5d:3e:18:9d:65:8f:bf:2f:e9:98:14:1b:59:3c:a8:
5e:9c:20:0e:b3:0e:3a:67:4b:8d:cc:b5:40:96:e4:
3b:3d:21:24:b8:bc:de:56:98:fd:ed:25:70:14:06:
c1:1d:dc:ec:84:96:fd:f3:7b:ac:e9:99:88:98:2b:
21:81:30:1a:73:09:81:d6:1a:c2:7c:08:a6:44:13:
b9:ee:1e:38:5a:34:55:96:e6:21:fa:d7:2f:b2:75:
f6:52:b0:df:99:25:03:0f:db:d2:0e:70:d3:d2:dc:
ae:ab:3b:94:9d:60:c9:eb:d8:ab:8f:bc:87:d0:0e:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:D1:82:F2:80:0D:54:94:8C:D9:6C:86:73:7C:9C:44:94:41:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/947af4f1-5ba2-3829-894d-febe54856a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:55:1e:73:66:d2:69:df:6c:e1:98:eb:73:b9:23:f9:db:18:
00:46:23:81:a4:e7:a3:10:d7:2c:fc:72:76:bb:75:6a:df:f6:
2a:b7:71:35:74:c9:68:e4:0b:ea:5c:65:0e:9d:b0:e3:f4:e7:
72:3e:cc:23:43:46:07:e7:b5:02:fe:d0:d3:eb:7b:08:95:ef:
30:56:1d:db:a0:1f:9b:fa:ab:4a:c4:c0:b8:0c:fe:ab:26:c0:
df:b4:b9:40:b9:e8:a3:41:da:d8:79:f1:52:b7:a7:c7:94:b1:
ca:17:e4:2a:6c:de:c8:ea:1e:6f:07:2c:d5:73:5f:be:27:dc:
d3:d3:71:7b:46:68:91:5f:75:50:65:00:fe:44:4a:c6:69:06:
6e:39:da:3d:41:01:b3:84:0f:e7:0c:41:f2:ae:dc:84:da:51:
63:8f:3a:aa:e2:5e:e3:b6:58:8a:2b:cf:e9:9f:b0:df:86:f6:
01:eb:8c:2a:87:30:5c:12:67:01:ab:10:a7:3b:e7:9d:0e:7f:
9e:34:4f:16:7a:01:6d:dc:d0:5c:f6:58:03:24:d7:52:0b:fa:
6d:70:30:33:4a:0d:4d:a6:9e:76:c7:38:da:e8:d1:90:be:71:
76:cf:3f:f2:34:04:ab:08:b7:9a:24:a7:a0:39:61:e7:2f:4e:
0e:d4:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:38 2025 by rpki-client