Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa
File: 9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa (raw, json)
Hash identifier: VHTlyZfDxsrEj+2gGjQpiMJhuTa6tTRAFyjzJpkYxNc=
Subject key identifier: 71:9A:7B:53:EA:5D:E3:FC:C9:96:B9:17:EC:DA:0F:5E:9B:99:6E:EB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF546EDB49912E8D07500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 17117
IP address blocks: 2001:470:151::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f5:46:ed:b4:99:12:e8:d0:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=16a19b12-0d6d-4613-b94c-2ff3653500e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0c:3e:5c:7e:92:6a:cc:b5:f6:3b:f3:67:26:
0e:e4:35:49:b1:74:9e:37:63:bf:f2:b2:b3:b7:2f:
fb:df:84:c7:5a:98:23:a7:41:e4:6e:aa:0a:02:22:
19:13:22:64:e4:97:8b:ac:76:cb:62:6c:fb:12:30:
51:29:9b:f5:de:72:b6:c3:76:89:1f:45:5c:50:0a:
d7:8f:07:33:1f:af:c0:16:f5:5c:6a:ae:97:7f:ca:
15:0c:77:16:9c:21:1e:cf:74:df:cd:b0:69:3b:01:
d1:7f:54:12:90:b7:f4:7f:a2:a5:b8:19:47:4a:71:
3c:a2:36:1c:19:83:5b:f9:f4:8c:f8:a8:16:33:07:
10:6e:56:e9:39:f9:44:7d:d3:e5:dc:05:3b:b4:19:
48:71:a7:32:6a:55:df:86:da:4a:a3:6c:46:eb:aa:
1d:bd:d7:57:e7:ee:98:9b:9c:ed:af:06:99:7d:ed:
8c:31:cc:8c:a8:83:35:85:66:a8:01:85:db:99:3f:
62:18:a9:76:10:d4:06:60:66:b5:cd:de:06:74:0c:
ce:7c:d7:78:be:1f:52:85:99:c5:58:74:5e:19:cc:
54:09:80:ce:94:46:f7:87:c9:e7:0c:80:4c:c5:a6:
52:d9:d1:96:2e:2d:2f:1c:8b:dc:4e:94:77:b1:c6:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:7B:53:EA:5D:E3:FC:C9:96:B9:17:EC:DA:0F:5E:9B:99:6E:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:151::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:24:cf:86:8b:08:cf:42:f4:04:16:3c:bc:9d:5c:0d:9a:dd:
f0:fe:ac:87:9a:5c:9a:cd:b4:bd:09:8a:a7:2d:82:b9:9c:cf:
45:8d:d5:26:5e:e1:5a:8e:54:3d:e2:08:96:26:55:22:f8:13:
7d:56:5b:17:a5:c4:ff:75:b7:bb:6a:74:f3:17:c7:d3:8e:af:
4c:0c:f2:e6:e6:4e:13:78:9d:73:57:c2:e0:be:c3:bb:4a:e5:
86:f4:62:0b:02:60:a7:30:1e:81:53:1e:0d:a3:7e:d3:8b:81:
71:e9:f1:75:73:9d:64:e0:90:23:7d:c5:4b:1d:04:53:6e:a3:
c8:9e:6c:0c:5a:e5:4f:da:15:de:b1:6a:c3:9a:e7:ba:3f:a5:
bf:62:cf:37:8e:73:aa:e1:ab:08:ed:dc:86:d1:a8:27:4d:f7:
93:c7:14:07:ab:3e:5a:4b:07:f3:bf:bf:6b:a6:70:14:bc:61:
59:b5:eb:bd:62:7d:03:e2:68:74:91:69:4a:6f:d7:4b:b2:b6:
55:9b:a0:a0:b0:47:29:5e:b2:a7:1c:91:20:67:95:69:bb:0e:
0b:0b:2c:17:b5:16:e8:b6:11:b6:70:54:4f:2e:64:28:d8:27:
31:7f:0b:0a:17:b0:c4:55:9f:d3:64:cc:39:af:ce:b4:7f:96:
26:d3:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:20:39 2025 by rpki-client