Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa
File: ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa (raw, json)
Hash identifier: J9MGcUKZ22x+wLX3sbgWNmdSCGRK6KXkqGyCfuzuyts=
Subject key identifier: 29:92:99:7F:49:0D:56:F0:09:CE:3A:F8:F1:2C:97:40:D8:03:44:79
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848AF2B723E524EFECF58266580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 46632
IP address blocks: 2001:470:3c2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:72:3e:52:4e:fe:cf:58:26:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=1e687e33-baef-47e3-aff6-fbd5d4769d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:b3:b3:0d:f1:5e:54:6c:73:fd:10:67:d5:
85:d4:8e:49:a8:d6:4a:18:a7:6e:68:33:94:e2:7e:
ee:dd:57:bf:41:a0:8c:38:f1:ae:31:88:ef:b7:4b:
84:14:f3:13:7f:84:65:e0:16:2a:26:a2:9e:bf:fb:
ea:2a:c7:f9:20:a2:90:1d:bd:6b:bd:66:dd:af:65:
3c:81:c1:df:ff:f8:cd:ad:27:76:8f:8e:75:a5:38:
cd:32:0c:0d:ee:9f:b8:66:8c:18:b1:15:c3:82:ca:
66:d5:81:1b:bf:4a:06:b7:73:c0:3a:f8:a1:93:17:
82:bd:ee:90:29:69:ae:09:95:f6:05:f4:c5:53:2d:
6d:d7:61:84:47:45:29:97:89:78:84:96:bd:2e:f2:
3f:6c:f2:7f:ba:6b:b7:2b:51:fe:6f:cd:76:d5:1a:
d5:a1:1a:2b:ad:59:68:e5:67:dc:68:58:0b:83:fd:
12:07:0c:31:84:8e:dc:ab:19:c2:3e:6f:f3:ff:36:
8f:22:56:28:f2:0f:cd:7a:87:d8:2c:4d:64:0d:97:
bd:c5:c6:59:82:fe:27:01:63:cf:81:4f:88:62:23:
36:3d:ca:74:81:8e:2b:98:98:47:46:83:32:27:62:
a3:aa:d8:a8:63:6a:de:97:4e:2f:8e:a0:58:11:80:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:92:99:7F:49:0D:56:F0:09:CE:3A:F8:F1:2C:97:40:D8:03:44:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3c2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f4:0f:86:86:3a:cd:8d:be:f7:67:a5:aa:40:03:7d:45:a5:
ea:36:07:41:32:c0:a8:68:9e:db:bd:76:b9:1f:78:9b:a2:65:
4a:b6:a3:df:a0:33:a9:98:ad:b2:91:1c:73:cb:79:04:95:cd:
d8:23:c1:94:47:85:87:66:88:a5:36:3e:b1:01:e2:4b:58:be:
5d:b8:58:be:18:25:aa:5f:7f:3c:bb:94:eb:ef:de:09:05:5b:
2e:02:99:4a:4a:30:10:53:6e:20:0c:1c:22:35:6a:f4:44:e0:
0d:34:05:4f:73:30:a2:6c:9b:89:0a:9a:e4:df:b0:48:89:51:
6f:72:82:30:6f:43:a4:78:3e:2a:b9:f4:46:cd:ce:cc:81:09:
aa:9f:08:e5:0b:c4:4f:2a:2c:f1:09:39:09:5e:80:41:26:0f:
f4:7b:2f:a9:f8:8a:43:03:86:8b:44:50:45:ed:57:23:78:c1:
4e:0a:07:34:d5:15:ee:4f:58:ab:d5:79:9e:66:81:07:42:31:
bf:33:3d:af:f1:f6:1d:6c:22:a8:7c:0d:7a:fe:a4:f5:57:c5:
a9:aa:68:cc:a8:bb:17:b5:f3:ad:86:ad:3e:6c:fe:9a:3d:e2:
64:f7:83:c3:53:48:6a:94:66:0e:71:00:24:37:2b:f4:db:a7:
88:34:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:54 2025 by rpki-client