Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa
File: 9a4e0954-4e54-387a-8d80-0054623a5fca.roa (raw, json)
Hash identifier: 29dXmN/Esw0j6jCxsHimdNWjXDnRJKfCRHkIZS9/2i4=
Subject key identifier: 6E:01:1C:7B:9A:44:3D:85:72:7D:84:23:18:5B:5B:EF:95:BB:32:59
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF4493A49FDB4E6FFE280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 11399
IP address blocks: 2001:470:ed::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f4:49:3a:49:fd:b4:e6:ff:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=35f29047-e13e-4b7d-982d-b9e57c0cc217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b2:64:06:9d:f8:20:c6:28:40:03:6e:f5:f4:
26:92:ff:7c:d3:cc:34:2a:d0:fe:67:99:68:67:82:
84:31:e5:1a:44:9f:54:36:52:30:ba:14:89:ce:f1:
86:a8:90:68:91:db:93:6a:10:98:85:a5:24:89:6f:
ee:50:cc:dc:38:48:47:23:e9:68:b6:94:cd:61:e0:
6b:64:92:9a:2a:ab:5f:f2:66:4c:22:94:df:93:38:
11:7f:ef:ba:6a:4e:aa:41:ea:0b:eb:1d:c6:08:09:
27:75:59:4b:dc:77:17:e5:f6:88:70:5a:5d:c8:fa:
2f:59:9b:65:79:c0:a1:34:34:03:33:ea:38:21:5a:
7a:f0:96:bb:f8:07:3b:f7:e4:fe:9f:89:6c:d3:38:
3e:7e:de:e2:03:a0:20:84:47:df:e6:86:cf:07:f2:
30:ba:7c:4a:aa:64:ab:92:b1:e8:64:0f:46:03:9a:
e7:f4:74:f8:f5:bf:13:0c:05:d7:2a:7f:cf:02:cf:
d3:92:29:23:fa:70:d4:27:83:da:2b:8d:3e:7b:90:
fc:67:37:03:ac:be:3f:8a:41:56:ec:bb:88:9b:88:
dd:15:ee:04:9f:a9:92:7a:8f:d7:cf:d4:92:93:01:
c9:dc:19:49:d0:ef:0d:61:d1:0f:4a:2d:5b:9b:e7:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:01:1C:7B:9A:44:3D:85:72:7D:84:23:18:5B:5B:EF:95:BB:32:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:ed::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:d4:a4:8b:c4:61:a2:58:c9:10:16:4d:c9:ca:f4:e2:de:a5:
57:25:c5:72:58:dc:e6:9f:ef:02:04:25:79:2f:07:50:bf:49:
74:f4:f8:a7:03:01:3e:28:ff:9a:aa:df:22:fb:1f:50:4a:55:
32:4c:68:07:09:b0:1a:3e:ad:91:a7:b2:bd:62:e7:36:27:0c:
8e:69:2d:c9:27:5b:36:50:5c:dd:b7:82:66:d4:85:e2:85:96:
fe:36:d0:8d:8e:65:3c:32:15:9c:a8:b4:9e:50:af:0f:1d:44:
44:c7:98:91:c4:76:0f:86:85:41:cb:ab:7c:e3:49:bd:fc:78:
2b:7b:61:b5:ce:14:51:b0:3c:b5:15:52:74:47:66:93:f9:63:
ed:ab:a8:05:04:89:3c:4b:54:5b:b9:a2:56:e9:28:7b:f5:36:
67:d2:00:1b:7e:51:72:88:93:47:b4:07:78:ea:64:95:1a:84:
a8:52:13:d1:cf:1f:1a:fe:85:b6:ff:16:c2:e5:96:fa:0f:73:
19:57:58:9e:9c:dc:50:93:d8:1f:3e:11:ac:8c:ad:e1:79:2a:
61:8f:6c:f0:0a:31:2a:5b:e0:c4:24:04:31:1c:f1:57:c6:50:
62:60:5c:5d:ae:97:a4:cc:31:11:c3:cf:9e:eb:da:58:9a:97:
01:01:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:28:55 2025 by rpki-client