Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
File: fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa (raw, json)
Hash identifier: WozVKOJnHZJ4wp38vFOzmbnJJKRExj9adZgjGKcKS3g=
Subject key identifier: 42:84:23:E5:D9:68:30:F8:9F:F9:54:69:CA:A0:4C:D4:EF:05:E9:A6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF91C1A5E3006F8176920
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 210222
IP address blocks: 2001:470:1b9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f9:1c:1a:5e:30:06:f8:17:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=9cdaa4bf-18f9-4d72-a198-7d60ad7cf8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:04:a3:42:85:1b:d2:f9:8e:ef:cf:e8:ef:
1f:43:45:a3:2c:e4:f7:21:24:91:c6:23:d0:be:a2:
61:2b:7a:ef:21:66:c3:e3:22:90:88:df:1c:bd:53:
8e:57:b9:c3:0c:10:db:c5:99:a2:85:08:d4:76:b0:
53:ff:d5:09:07:c6:f1:29:99:63:b9:b7:8c:23:31:
a6:d3:c0:3d:6e:1a:a7:23:52:2c:e2:94:f9:f2:f5:
0b:61:71:93:fc:d1:fd:39:bf:55:38:b9:e0:45:76:
96:c1:6a:de:ae:9e:a6:b7:b0:6a:a2:75:c0:5d:ec:
68:b3:80:58:7f:cf:7d:fb:cf:96:9a:20:4f:13:7d:
5c:e3:22:16:e9:0e:af:3e:3d:72:9c:bf:74:85:0b:
13:ba:f2:5f:34:6d:66:e6:3b:de:ca:f4:3f:66:9b:
92:2c:93:a4:f9:ed:04:78:f8:b4:30:0e:76:5e:96:
50:84:9a:03:76:d8:93:43:cb:55:6f:1f:6f:55:72:
a4:bd:7d:b8:cd:d6:15:01:5d:51:bf:dc:ac:96:ca:
85:fd:36:fa:5a:a7:ea:0d:43:10:81:95:ff:ac:ea:
60:32:be:88:6b:73:2a:f5:2d:ff:6b:40:a1:16:5e:
d1:dc:73:b3:f4:98:2b:6a:5c:18:31:28:88:8e:bf:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:23:E5:D9:68:30:F8:9F:F9:54:69:CA:A0:4C:D4:EF:05:E9:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1b9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:8d:fc:cb:82:b3:d0:f7:78:4d:81:8c:b9:52:68:73:38:15:
b4:6e:13:ff:e3:58:42:b5:5b:87:71:41:e2:63:39:c4:09:4e:
af:f3:33:35:9f:94:dd:9d:1b:d2:62:9f:db:c4:58:55:75:a2:
3a:b5:de:2a:eb:2e:c6:21:86:30:80:4b:bf:08:f2:0e:9d:1f:
fd:a4:7f:ea:cc:96:dd:94:69:86:7f:83:3c:84:ec:17:61:8c:
24:cc:20:5a:38:de:58:9b:88:58:85:ef:f5:77:b6:12:6c:b4:
cb:0a:fb:7d:68:19:d1:bc:ad:95:80:4d:c6:32:64:36:ef:f9:
54:6a:99:62:7b:95:b9:78:2e:57:16:13:4a:be:d4:25:ea:74:
94:ca:75:e3:81:56:aa:b2:eb:9b:48:51:4d:c9:b6:93:39:e7:
8d:47:44:07:8e:0d:fc:09:45:e4:90:d5:e6:e3:a4:1c:fe:0c:
8d:27:bb:23:cf:5e:86:af:40:b3:9a:d6:4d:e1:eb:93:70:52:
f5:2f:58:af:de:0d:a2:02:cb:c9:31:f7:a2:28:d7:1c:19:07:
8c:a6:cc:a3:9e:36:3f:13:04:3c:73:b3:11:8e:5b:29:4d:43:
fb:ed:c9:1d:17:a6:7a:cd:2c:f3:33:e3:1e:2a:ba:30:11:98:
70:9c:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:26:47 2025 by rpki-client