Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a97184f2-8121-36dc-bfbd-dc86bc3890fa.roa
File: a97184f2-8121-36dc-bfbd-dc86bc3890fa.roa (raw, json)
Hash identifier: 3/PDPt+jRwIxfY+2gSMKcsacDY/v81GhmJE+J8g1vTI=
Subject key identifier: 97:70:9C:DA:8D:A6:72:2F:16:4F:AD:26:54:91:BC:E0:26:6A:63:F8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0132BC420ACE1F85A6500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a97184f2-8121-36dc-bfbd-dc86bc3890fa.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 216302
IP address blocks: 2001:470:1a6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:13:2b:c4:20:ac:e1:f8:5a:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=d9912bd3-0292-413e-b431-3e8c0ac9f1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:26:c5:1c:17:84:49:30:8d:ae:a1:c3:87:
e4:bd:f1:2c:fe:8c:0d:fd:d2:89:c9:77:74:99:28:
66:eb:ce:8d:c5:70:bd:1a:ca:cb:87:55:b1:95:13:
c1:b9:48:5a:eb:92:9c:a2:63:fe:d8:74:ef:c7:91:
24:80:32:e4:f9:af:17:6c:e6:58:52:61:d9:7b:47:
f0:9f:9d:01:06:86:b3:5e:dc:c8:98:39:a4:a7:e3:
6d:9b:91:72:a9:0c:3d:68:85:1a:b2:18:2f:86:1f:
a7:bc:79:7e:1a:24:af:16:67:5a:c0:f5:fd:ab:6c:
72:e0:f0:38:e8:92:af:be:b5:23:7b:61:cb:ff:a6:
c7:0f:8d:44:48:dc:e9:af:74:61:f0:a9:46:7c:32:
9c:83:af:e3:13:4b:d5:e0:1d:03:0d:04:9d:34:45:
8d:db:99:ee:73:ab:3e:3b:ac:3b:08:86:5d:13:ce:
c3:26:83:0f:34:6b:7a:73:62:48:f3:8f:e6:7a:00:
3a:ee:90:9d:5a:78:cc:bc:14:80:9b:0c:82:c1:5c:
66:f6:25:3b:5b:7e:e5:2c:85:e7:b2:75:23:74:e5:
d6:ec:40:d0:60:9e:1f:47:39:71:e7:4c:9b:c5:10:
8f:62:07:2b:78:68:b0:dd:e4:01:7a:cd:9c:36:df:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:9C:DA:8D:A6:72:2F:16:4F:AD:26:54:91:BC:E0:26:6A:63:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a97184f2-8121-36dc-bfbd-dc86bc3890fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1a6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:85:59:05:67:d3:ce:c3:b4:b6:a9:0e:da:9f:1a:b9:ea:ef:
25:3c:cd:d6:df:ba:7d:4e:a8:f8:9d:e0:37:f5:ed:ec:41:33:
c5:17:6d:62:7e:f1:cb:1a:ea:56:d7:3b:52:66:8f:56:f5:f9:
2c:ce:c9:48:87:ef:c6:e2:cd:32:03:47:4a:ae:b6:8b:6b:d7:
ca:3e:82:60:bd:2a:8e:86:2d:36:3c:1c:dc:d4:30:03:a1:f9:
c0:05:a1:db:11:a2:5e:9d:c7:01:f1:2c:e5:d3:6b:c4:88:fb:
79:d4:b7:e6:0e:44:5e:cd:06:c4:c0:73:8c:ed:3a:3b:57:32:
84:c5:ae:e3:00:85:37:6b:87:32:0b:46:03:c2:f8:4f:23:69:
4a:08:04:ae:51:77:d8:6f:a3:65:1b:eb:15:ff:c9:44:0b:45:
54:46:45:76:6c:b1:b1:38:ec:0e:31:44:5f:ac:43:69:24:63:
ef:03:92:0b:06:bb:17:e0:a9:23:5a:a8:34:e6:44:ba:b0:35:
a4:5e:c6:47:43:30:26:d0:5e:a1:72:67:2e:fe:be:8f:ad:d4:
b3:bb:d2:ca:a6:6f:87:68:e8:01:d1:a2:3a:76:c2:92:e1:5c:
c3:9b:4a:37:00:c7:9e:00:93:47:c0:9f:8d:8a:b9:2b:c1:f9:
4a:19:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:22 2025 by rpki-client