Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d7bbf5-83e7-3732-a32f-db0fa1579d04.roa
File: f4d7bbf5-83e7-3732-a32f-db0fa1579d04.roa (raw, json)
Hash identifier: n6k4Bh3Qv+QzSYXiSATm9Pbs04upZSqDB1DdLEhN4Xw=
Subject key identifier: 49:3C:EE:0D:AA:23:EB:5E:93:DE:97:93:00:B2:DE:CF:07:76:D9:CD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584839EADB44BD09EBC7B5D92DC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d7bbf5-83e7-3732-a32f-db0fa1579d04.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 32693
IP address blocks: 2001:470:32d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:db:44:bd:09:eb:c7:b5:d9:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=1ddceee4-688e-4ce0-9ab6-29a429879aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:d6:3e:bb:fb:5f:38:65:3c:ae:21:db:ca:
23:6e:78:ba:78:92:ea:96:bf:87:10:30:fc:86:c9:
45:75:3c:5d:13:32:51:81:17:90:37:6c:74:46:d4:
c2:f9:1d:21:c9:0c:4e:5e:d5:5d:94:97:14:dd:9d:
91:5a:d5:1e:aa:6f:59:14:c6:be:84:93:c4:d3:7c:
d4:15:a1:eb:67:7b:c9:4a:9f:1a:cd:f3:0d:3d:1e:
db:74:ab:f8:f6:41:3e:36:b0:4a:fc:4b:3d:79:c2:
cd:80:e8:2a:72:e8:04:22:d6:7d:c4:2f:ca:6a:e3:
d8:34:4b:00:48:2b:5a:af:e7:95:59:60:3c:1c:10:
67:76:e8:c7:72:fb:64:ba:0c:35:80:bd:05:d1:67:
30:b1:97:dd:57:1b:00:3b:0c:eb:47:a5:f2:27:9d:
5c:71:cc:75:f8:74:3d:10:64:23:9e:2e:eb:bc:10:
f3:b6:7a:a0:df:3a:ca:fd:e1:e0:87:5d:bf:39:a3:
55:4b:02:6f:ca:d8:5a:7a:d3:ec:b4:2e:00:f8:70:
c0:10:4b:5e:d2:f1:cc:fe:8d:11:42:b4:8b:26:be:
a5:d5:92:70:20:48:b5:b7:cd:9a:e6:6b:c8:5b:0a:
86:8f:48:f8:8a:7c:65:6a:cc:fb:99:59:71:0e:7a:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3C:EE:0D:AA:23:EB:5E:93:DE:97:93:00:B2:DE:CF:07:76:D9:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d7bbf5-83e7-3732-a32f-db0fa1579d04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:32d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:17:dd:21:01:51:1b:a6:61:0f:fb:c3:06:86:8a:3f:c9:a9:
07:d5:01:14:12:19:be:92:d1:c1:63:5d:6f:77:a0:61:ea:82:
84:36:12:68:53:00:e9:71:94:39:49:51:ab:4a:3f:40:80:97:
aa:6a:e7:82:3b:6d:50:a0:c2:34:14:a5:4b:3b:e9:64:07:76:
1f:75:b7:6c:2f:c7:c6:0d:42:a8:1d:1b:a7:17:f2:40:b3:c3:
a1:17:45:26:79:77:1b:a7:8d:30:89:a8:6f:44:d4:b3:3d:86:
2f:62:e5:f5:c9:64:64:eb:0c:b7:93:5d:b8:8a:94:de:1e:6c:
28:1d:53:a5:4c:e7:56:a2:5f:25:9f:73:ce:ef:42:8a:4e:a1:
fa:6d:30:d1:be:e9:2c:c2:2e:fb:13:ad:57:6f:ca:f0:2d:08:
da:1f:8a:90:19:8c:e5:f2:d2:8a:c9:35:85:22:4d:07:35:35:
4a:0d:f4:ad:82:22:bc:39:4a:5c:a5:a5:b1:8f:aa:cf:40:3f:
b9:97:55:9e:78:49:77:55:1d:76:5e:87:69:07:67:75:56:be:
fd:2d:48:31:f8:bf:db:8d:4f:3d:b5:5e:b1:7f:f5:4a:b0:fc:
b3:92:c0:08:bc:cc:04:e6:f7:09:0a:85:b0:11:47:85:b8:c8:
48:7d:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:20 2025 by rpki-client