Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbee8fa5-98dd-3fad-9c32-c4b3d062f0e1.roa
File: cbee8fa5-98dd-3fad-9c32-c4b3d062f0e1.roa (raw, json)
Hash identifier: 8MSLZlzqoX3iuAi9rpBWLeSmS4QO/71OH17h20DcKdE=
Subject key identifier: 8F:51:5C:84:29:48:BC:E6:13:82:D9:16:E2:78:88:D6:FF:4D:43:6B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF0BB8C1EFF712AC1F3C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbee8fa5-98dd-3fad-9c32-c4b3d062f0e1.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 8046
IP address blocks: 2001:470:de::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f0:bb:8c:1e:ff:71:2a:c1:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=cf6ca4f5-621b-426c-8d54-7e8106a4d803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:75:31:89:3a:cf:dd:ec:7a:e8:77:ea:ce:
c3:6e:98:4f:77:fd:c1:fd:af:ed:0e:ae:b6:0c:dd:
82:35:a5:0c:d1:38:e1:28:a0:24:d7:09:86:15:d8:
b1:0e:7d:8d:20:a4:49:6c:8d:a1:de:47:d0:70:d5:
c6:2e:5d:66:9f:c8:b6:d7:49:ba:24:21:11:09:f0:
27:e4:c4:11:8c:73:f9:7d:77:cc:f4:af:79:37:fd:
9d:e7:cf:9a:e4:98:6a:31:15:94:2b:33:b8:05:ae:
36:7f:bb:0d:40:bb:91:d8:79:cc:5b:24:e8:95:cc:
87:f0:6c:fb:51:b6:14:81:4d:99:3a:40:07:40:0d:
65:52:bb:d5:57:89:5b:7e:00:6e:7b:ae:85:ea:d4:
35:52:bb:de:04:0c:8e:b9:1b:06:0c:a5:cc:c9:10:
81:ab:df:6b:4c:b8:5a:2a:8d:aa:06:cb:17:bb:48:
a9:5f:52:b2:ac:9a:87:54:a6:67:83:f4:26:a0:37:
fb:79:f7:aa:9e:9e:40:93:ab:d7:65:cc:3c:ac:af:
24:d5:4c:13:88:7b:ee:68:4a:c4:93:b2:15:ee:32:
2b:ba:85:3e:5f:07:23:e8:b5:b9:d7:38:f0:8a:94:
f2:63:48:e5:2e:3e:8e:9e:ee:08:1c:eb:c2:b8:4d:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:51:5C:84:29:48:BC:E6:13:82:D9:16:E2:78:88:D6:FF:4D:43:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbee8fa5-98dd-3fad-9c32-c4b3d062f0e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:de::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:09:e1:be:55:86:20:7e:cf:d3:17:95:5a:a2:87:b8:36:ad:
49:01:e9:c6:75:7d:53:b8:82:5c:f8:1f:5c:25:c1:f9:06:f0:
4a:64:2a:3d:b4:ee:22:bc:c8:41:b2:10:ae:c1:cc:d1:d0:f0:
15:86:ef:c2:83:7c:2d:b5:a3:35:f3:ec:7d:26:71:2f:d2:96:
f9:7f:79:52:dd:7d:1d:19:13:a4:d6:77:21:25:46:30:13:09:
f3:85:ee:6a:e5:5a:8f:5b:84:b5:7a:45:07:1a:7d:52:a7:9e:
e4:79:a1:83:f4:99:90:ec:80:9d:90:e9:92:30:53:39:89:86:
10:28:b2:be:fb:bf:08:3a:55:b8:d1:6a:24:af:18:9c:1d:a5:
84:d1:1f:3e:fc:c1:1f:5a:f2:cf:a6:c7:31:46:58:73:14:58:
42:c8:0c:4d:da:53:d4:6d:98:92:58:c5:38:be:b3:ec:1e:d9:
61:26:7c:5f:fb:38:e3:1e:1c:95:bd:50:f7:a1:0a:03:08:8d:
54:a4:30:5f:a8:e1:f3:9f:33:79:2b:e1:29:c8:28:ac:94:c6:
73:4a:28:f0:f4:7a:fe:f1:58:84:07:d6:56:fe:61:9b:7f:4a:
b3:e5:39:fb:7a:b9:ca:66:d6:c6:0e:7d:8f:a6:c8:91:e2:10:
8d:f0:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:24 2025 by rpki-client