Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db6eb647-cbba-3524-9a16-8246a3a28deb.roa
File: db6eb647-cbba-3524-9a16-8246a3a28deb.roa (raw, json)
Hash identifier: C+voNJAfB1K8/7tbJ8ebwmB4Ao7x/S1vOp0wPQBfIRE=
Subject key identifier: E3:69:F2:39:09:21:58:80:52:FA:AD:54:48:DB:DF:8B:E5:4A:6E:BB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848A6D9ECCD42D3AE9068B7E380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db6eb647-cbba-3524-9a16-8246a3a28deb.roa
Signing time: Fri 24 Jan 2025 14:30:10 +0000
ROA not before: Fri 24 Jan 2025 14:30:10 +0000
ROA not after: Thu 24 Apr 2025 13:30:10 +0000
asID: 23673
IP address blocks: 2001:470:3fd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:d9:ec:cd:42:d3:ae:90:68:b7:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 24 14:30:10 2025 GMT
Not After : Apr 24 13:30:10 2025 GMT
Subject: CN=b8a5662f-fa4d-493d-846d-69e54351f7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:b3:73:2b:4b:82:5c:90:00:13:fe:00:9b:
f0:e9:f6:ba:5b:be:d9:89:f4:13:3f:32:bf:5c:89:
c9:a3:63:ea:8a:e7:13:2c:e5:73:fc:08:52:b0:31:
cd:63:20:b0:ec:f1:15:68:31:ce:fa:d2:bc:27:c9:
37:2f:ee:d9:39:23:54:d8:a9:99:85:bc:d8:00:a4:
60:23:02:91:57:29:c7:70:e1:88:d4:54:45:60:d6:
35:9e:0c:3d:5c:d2:3b:5f:56:92:6e:07:fd:5b:a3:
58:2e:09:bc:af:37:00:b3:f2:c1:b4:6e:a8:30:72:
30:c7:bc:cc:d3:71:11:79:ae:09:d1:9c:59:1f:76:
6a:27:ce:92:83:bc:e6:fc:94:87:f2:4a:a1:d9:99:
18:52:69:07:ec:11:2a:19:e5:af:4d:c7:1a:0c:98:
b3:b3:4d:d0:9b:94:8e:b0:6b:23:6f:0d:99:c9:4f:
73:b3:fe:27:59:e1:af:47:1a:1b:ba:ab:f2:0f:ea:
47:f3:06:eb:12:bd:d9:f3:fd:62:d4:48:ca:c4:cd:
3f:df:b2:74:7f:d0:97:c3:5c:1f:71:82:2f:5c:47:
7b:af:29:e2:b5:ee:3d:94:bd:b2:c6:1b:77:30:0e:
ff:a8:14:f3:d4:77:fa:a2:01:92:e8:27:eb:5a:f3:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:69:F2:39:09:21:58:80:52:FA:AD:54:48:DB:DF:8B:E5:4A:6E:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db6eb647-cbba-3524-9a16-8246a3a28deb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3fd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d8:b9:56:32:41:9f:41:05:7b:b6:86:db:5a:3a:6d:4c:36:
4c:2d:af:09:87:1d:bb:ec:51:30:b6:25:b3:9c:b9:e0:40:ab:
8a:83:b4:50:6d:ef:ce:d3:02:ac:a2:1d:4c:70:cc:9e:48:38:
6e:a4:6b:7a:b7:f5:c8:33:69:48:c5:e4:43:c5:4e:04:d9:10:
82:15:9e:fa:39:2e:e8:ce:92:8c:c3:ed:5b:26:b0:d2:55:8b:
35:24:00:20:86:4e:30:e3:12:e5:9c:7c:45:ff:f5:41:94:81:
db:ac:67:88:3f:4e:fa:22:f9:4a:8a:43:36:45:4e:e0:c1:03:
b4:fb:b3:df:d2:03:46:95:8c:87:f8:71:b7:1c:24:3a:7b:27:
36:d6:da:c4:b5:f7:a3:35:5f:2e:fa:d8:64:2b:3d:da:ee:fb:
16:78:4b:2a:78:fc:4d:94:69:0a:a6:e8:e2:b1:49:4b:29:2e:
90:d1:bb:3d:37:89:eb:42:8e:d0:2e:80:49:87:ea:d2:ff:b1:
e7:75:61:62:69:ac:47:16:85:62:b5:8d:ea:e6:03:a8:aa:56:
17:6b:2a:ab:a4:22:db:89:9b:82:fc:4e:4c:14:0e:58:4a:b1:
11:d7:cc:b2:38:57:1a:e3:4f:3d:3c:0e:cd:c9:e4:a1:ca:34:
d0:b8:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:49 2025 by rpki-client