Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9b3ab0d-d98c-3370-9f2d-475b21f35fc6.roa
File: d9b3ab0d-d98c-3370-9f2d-475b21f35fc6.roa (raw, json)
Hash identifier: qAG4yNqgBnhYLTOD30pGeEh8dw85VSHjfHmhJL2DmgE=
Subject key identifier: DB:BD:1A:E8:5C:0D:F8:28:02:05:49:33:40:FF:FD:FF:35:F1:35:93
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D004BA9F3D53FE3C1EB0C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9b3ab0d-d98c-3370-9f2d-475b21f35fc6.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 46276
IP address blocks: 2001:470:2ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:04:ba:9f:3d:53:fe:3c:1e:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=c8acc763-d348-4214-b89b-7fcb2ca12cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:ce:2e:a9:12:23:31:48:10:2c:8b:c4:81:
39:c4:d2:6b:d8:8e:d2:58:7c:44:ad:ce:10:9a:00:
5f:e1:63:8a:8a:b5:98:08:9f:22:61:71:dd:07:a1:
3b:0b:df:17:ec:43:73:bb:7e:72:b3:1b:6c:7f:21:
8b:5c:c5:05:cf:2d:15:b5:d2:d1:08:1f:1f:4f:b4:
06:53:c1:aa:97:fa:65:e4:c4:27:42:d5:d9:66:05:
89:f7:43:74:c2:c6:0a:90:2f:ac:96:cb:c0:51:cf:
a5:d9:66:83:f8:aa:59:47:fc:2b:31:df:3a:b8:54:
0c:7d:b2:4b:45:3b:ac:da:40:85:85:3b:30:cb:1f:
80:57:39:fe:bb:7b:93:f5:5f:9b:b5:2a:4b:3e:d1:
0e:7d:83:3b:a8:89:62:1b:ce:b8:1e:7f:ee:50:e5:
66:08:e4:aa:c5:73:d9:6f:9c:84:e9:95:13:bf:f1:
1f:6d:d0:bf:2a:a5:59:ec:f9:ca:d6:a1:51:1b:cf:
47:8b:05:23:45:02:53:87:43:59:8e:1f:0b:88:fb:
cc:f4:21:42:ff:9c:2e:41:2d:0a:3b:ba:18:c9:d5:
72:e1:8f:d5:be:b9:19:d4:24:8e:6e:78:f0:c4:9e:
5f:c8:97:8f:0b:59:3f:58:d8:60:7f:c3:74:39:a4:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BD:1A:E8:5C:0D:F8:28:02:05:49:33:40:FF:FD:FF:35:F1:35:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9b3ab0d-d98c-3370-9f2d-475b21f35fc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ec::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ba:90:3e:ea:1d:b7:1f:4d:26:c8:47:46:fa:68:c1:19:9e:
08:e3:af:df:a8:28:1c:18:df:8a:14:66:31:ec:b9:be:c8:86:
c8:7e:4b:76:d7:82:8f:a7:ae:ff:54:c1:cb:5a:fc:29:5e:65:
40:13:97:a4:59:41:c8:8c:7b:10:98:31:f3:08:97:7e:75:d6:
69:49:d8:9a:9d:06:f5:9a:d4:08:40:91:b2:78:89:49:bf:80:
e0:0c:06:a7:80:94:20:5e:82:60:e0:e2:12:82:d5:c2:b6:ac:
a2:94:15:9c:6e:21:6d:56:f0:2f:80:5c:18:58:ae:0f:1d:51:
4b:b2:e2:30:23:40:cb:bc:9d:da:e4:f8:3f:e5:15:46:ed:0e:
98:28:a5:39:7a:af:13:8a:66:93:3d:62:ed:bd:6f:8e:57:ca:
fa:fa:a6:f4:7b:f9:a4:35:93:3a:bb:68:91:1f:02:a2:fa:c6:
aa:77:b9:ae:19:26:22:e6:19:92:7d:8b:73:3e:75:79:d6:09:
4a:b3:40:d7:98:9f:50:23:d8:86:33:d8:a9:8a:98:1b:8b:0f:
0e:7f:d2:79:cc:b9:b0:78:a8:d3:f6:3e:0d:ac:e6:9c:bf:ac:
0e:50:fc:f3:29:e9:cd:1c:6e:3e:4c:6a:74:32:e7:c1:88:d7:
f7:a4:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:36:00 2025 by rpki-client