Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d489cb4b-3ce7-355e-8631-e47fdac4c66f.roa
File: d489cb4b-3ce7-355e-8631-e47fdac4c66f.roa (raw, json)
Hash identifier: KvCHaSIBFt3P0x0PcbDOne1tpX0hqG3rxVPNrlM1c40=
Subject key identifier: 33:21:DB:51:36:78:ED:1F:E6:99:C9:7F:F6:25:5F:38:A0:47:18:FF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01373DC13F4C8C5F8CA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d489cb4b-3ce7-355e-8631-e47fdac4c66f.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 31856
IP address blocks: 2001:470:18a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:13:73:dc:13:f4:c8:c5:f8:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=0e8bae55-8996-48ab-8fba-6caefe234303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:f5:b6:22:6c:8b:ac:db:ec:8c:ee:4a:45:
8a:ff:a3:de:f9:b9:e4:48:af:a2:96:0f:d0:44:14:
3c:89:a9:e2:be:87:60:80:85:bd:02:63:3e:db:39:
0b:91:74:e3:c2:d2:b8:77:6a:55:9d:1e:ad:51:24:
8c:77:d4:5c:69:ef:6d:5b:10:dc:e5:d0:9e:84:fc:
0a:a7:b1:45:12:79:b6:7d:57:a0:ac:eb:6e:95:9f:
2d:d6:20:0b:6d:42:dd:15:a7:8c:8c:32:ea:ef:51:
03:44:b4:f2:06:fd:d0:ff:76:5a:03:c5:16:11:41:
b5:2c:9d:27:f1:30:20:65:bd:e4:b1:13:1f:29:1e:
ec:3e:64:96:05:87:5d:35:bc:f0:b6:b5:07:52:c0:
41:b4:1d:1e:a5:08:eb:a6:09:f5:11:1e:55:77:a9:
20:77:a1:ab:44:b6:d9:b9:cb:c8:e6:60:5b:3f:85:
fa:95:9b:5e:56:cb:cc:88:e7:b5:04:f9:23:66:06:
37:a0:72:4a:2d:38:34:2a:86:fb:3c:ac:d7:f1:23:
cc:e4:e9:27:62:70:0f:92:a5:15:98:96:cf:bc:78:
66:8f:2a:1e:b6:ed:bb:4f:a7:bc:06:cf:d4:da:65:
8d:ef:f4:60:0c:69:9c:bc:34:7f:4c:5d:e5:98:63:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:DB:51:36:78:ED:1F:E6:99:C9:7F:F6:25:5F:38:A0:47:18:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d489cb4b-3ce7-355e-8631-e47fdac4c66f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:18a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:8d:80:5f:8f:d1:6b:ea:3e:39:bc:a5:69:c8:5b:98:9f:c8:
8d:c4:7a:5f:0a:f1:59:5c:c4:23:a9:a0:3f:3b:2f:3f:b1:ff:
c4:43:57:81:3b:01:c0:cc:cb:f8:71:14:9c:b1:0a:1c:7c:98:
13:83:d5:d4:76:97:f6:0c:39:92:8b:f8:a3:62:78:af:63:69:
5c:13:4f:39:f7:0b:08:54:02:33:52:00:32:12:ec:9e:d1:13:
f6:99:ac:f8:78:10:be:89:2d:b0:f3:51:a3:62:db:be:cf:82:
94:bb:b8:c9:58:8d:52:05:84:7d:45:b9:8b:fb:01:54:7d:68:
08:67:5f:f9:7a:3a:02:8c:18:bd:52:8b:05:2f:6d:26:a2:cc:
ef:24:fe:c9:0a:31:a3:21:2a:e8:61:62:13:6c:17:88:1a:bc:
33:c9:21:3e:52:2d:0f:b6:f7:36:fa:19:c1:e0:5b:f0:15:ea:
52:cc:97:d3:7d:65:67:81:47:a5:33:96:25:dd:fc:2d:56:19:
a6:db:21:48:7c:65:bf:75:17:8a:7a:4d:58:2b:f6:3d:f7:b6:
f7:81:bc:cc:b2:a6:d7:1b:0f:f0:6b:3f:f8:d6:7e:32:30:b8:
44:fb:df:da:f8:45:e4:ba:10:cd:9c:41:da:50:7f:29:f9:71:
29:1c:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:40 2025 by rpki-client