Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8ca4dde-b788-31bf-8af3-a54206f209d5.roa
File: c8ca4dde-b788-31bf-8af3-a54206f209d5.roa (raw, json)
Hash identifier: qp5qkHbnEa0fGh/ZM6z2fWJOGESnjTX1MlSs17MJ81U=
Subject key identifier: AD:AA:E6:D1:54:C3:A2:AF:C9:22:DC:F4:CE:9F:2B:A8:54:DA:70:D8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858484D757FACF956CC14E4651B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8ca4dde-b788-31bf-8af3-a54206f209d5.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 133210
IP address blocks: 2001:470:1c6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:7f:ac:f9:56:cc:14:e4:65:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=92292bad-9159-49ce-9ac2-76e869be021c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:15:83:f6:c3:8c:d2:6d:c6:9d:d0:3e:cf:
70:e8:ee:28:53:8c:4b:59:34:b7:15:2e:f5:80:a0:
09:e7:60:2a:e5:90:79:2e:cc:8e:ae:21:04:d9:a6:
48:f9:58:6d:f6:36:a5:3b:a8:c1:59:51:9e:76:ed:
4f:8e:f0:56:35:93:f6:1d:ac:a3:ff:6c:20:41:f1:
a4:3b:25:bf:9a:ab:12:5b:29:31:3b:85:aa:05:35:
c5:a3:d6:7a:9f:b5:3c:da:1c:df:27:ef:b5:e2:b5:
d7:80:a7:1e:8f:85:35:24:1d:fa:60:33:44:73:45:
7d:99:01:70:f3:25:e2:0f:0d:86:11:54:3d:bf:be:
70:d8:95:07:d3:68:51:b0:92:a8:2c:52:c4:03:a7:
11:6d:d9:69:a6:54:4b:3c:10:b2:37:8b:fb:30:e3:
0c:48:7e:66:e7:db:ef:5d:11:ca:b8:f7:54:ab:c7:
90:d2:f0:18:29:f6:0b:90:6e:cc:76:f0:52:b9:37:
02:d3:61:2a:db:9f:8d:01:14:d0:94:67:47:f0:68:
42:09:07:06:21:61:9c:a4:f0:e8:1d:00:a6:b5:22:
2f:64:3c:87:f5:2e:dd:3c:13:1c:f6:cf:b3:de:4f:
d6:11:41:bd:76:75:b0:cf:2e:70:54:b8:d0:1a:06:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AA:E6:D1:54:C3:A2:AF:C9:22:DC:F4:CE:9F:2B:A8:54:DA:70:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8ca4dde-b788-31bf-8af3-a54206f209d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:bd:5d:ad:87:fd:6a:48:02:b5:b6:1e:29:08:ea:66:3c:ff:
1c:58:8b:51:79:b6:94:8a:e1:a7:1f:70:64:b9:44:90:c6:8e:
1d:b7:7d:f3:bf:c8:69:e8:64:70:df:95:57:a9:d4:b6:3b:7a:
a8:5a:48:c9:62:ea:50:f0:7e:da:6b:c5:77:eb:25:a7:65:82:
c5:0e:e7:66:6e:26:40:df:ef:f3:9f:be:7d:72:96:bb:a2:3d:
59:5b:c6:a9:43:fc:cc:cb:d5:ab:ac:93:76:40:3c:e1:21:4c:
1d:80:c3:2e:98:91:f9:33:ae:2a:63:6e:bc:90:d1:7f:30:76:
f3:d2:12:d6:ac:6d:c4:23:5e:21:3f:52:ef:4e:c2:c9:3b:15:
93:b9:28:b6:49:f8:73:55:0f:94:68:d6:d7:61:b1:91:c3:55:
20:d2:2f:15:dd:fe:18:d6:f8:6b:94:54:54:db:b4:5a:a8:ff:
89:66:e2:c0:b2:f7:cd:60:fc:bc:54:db:75:79:68:a5:f6:ca:
81:49:ad:4b:37:0d:a0:18:0a:e1:85:2a:e6:3d:86:bc:fa:a2:
96:72:9e:a2:2d:0f:1d:84:f3:0a:8a:29:02:fd:ff:d6:ab:5f:
8d:0c:88:ab:7f:e0:34:9c:c7:33:aa:4b:8b:f4:f2:44:6f:0e:
3d:b0:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:47 2025 by rpki-client