Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14004f1a-0c93-3591-9c19-e9d8968253a9.roa
File: 14004f1a-0c93-3591-9c19-e9d8968253a9.roa (raw, json)
Hash identifier: oVfnsSsywfxfH0DlkboS6Oi80haHw8TY9SB/PP8FLBQ=
Subject key identifier: 56:92:2E:10:B9:33:2A:DE:5E:4C:E4:48:BA:B6:CF:6A:F4:AE:61:94
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BE77E54616650551CA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14004f1a-0c93-3591-9c19-e9d8968253a9.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 8059
IP address blocks: 2001:470:a5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:be:77:e5:46:16:65:05:51:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=5d5754ab-dbb2-4bb4-a427-cf38bf57eea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:7b:a8:5a:8f:dd:10:3c:41:d3:6f:59:62:
7c:ce:25:54:ab:e5:cf:d0:ed:75:54:c4:97:50:72:
01:f6:e6:71:09:dd:50:28:b0:59:f8:ba:7f:cb:03:
1b:88:d4:9b:76:a7:96:b0:2c:db:38:df:a0:6d:90:
ba:c5:05:fe:b1:5a:d5:15:30:f6:ee:20:7e:e9:c7:
51:85:13:c3:1e:9f:88:b1:de:40:29:2f:06:8d:01:
43:ce:bf:38:f5:c1:ee:d8:0c:ea:a0:e0:06:a0:03:
5d:44:dc:07:2d:c0:7b:dd:a7:bb:dd:bd:10:33:6c:
ef:ed:86:fb:3c:a1:47:ec:29:95:37:82:e9:ce:d8:
d7:92:38:de:0d:aa:97:18:b4:5c:5f:da:8a:73:ba:
15:67:d8:d5:cf:36:84:3b:c8:f1:36:0c:72:e9:97:
c2:e6:5e:ed:c7:80:17:28:cd:1c:cb:22:c9:1b:52:
5e:21:15:32:7e:60:78:9d:8d:79:b7:6b:e1:cf:9e:
d4:e8:1b:32:c7:ee:d7:d3:d4:ea:7b:6a:5c:23:2e:
81:fe:87:c2:13:7a:24:9e:2c:bc:0e:cc:9c:b4:c3:
2d:77:26:ca:bb:98:23:4e:c5:11:11:ee:51:1b:08:
73:b6:17:d3:38:89:44:ee:36:7a:9d:8a:49:e1:c1:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:2E:10:B9:33:2A:DE:5E:4C:E4:48:BA:B6:CF:6A:F4:AE:61:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14004f1a-0c93-3591-9c19-e9d8968253a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:a5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:79:37:72:0b:b4:b2:2a:c2:f7:46:69:d5:99:6c:f3:1f:7e:
c4:93:8f:f9:5d:0f:f4:c0:87:51:29:f0:58:0c:61:f4:19:f2:
3f:71:7c:d4:e6:4e:ad:ba:c2:71:20:53:ca:7b:42:5d:fc:72:
c1:87:19:e8:e8:aa:06:6e:b4:5a:1c:f7:7a:81:fb:c8:14:3b:
f3:ef:00:93:de:06:08:c1:1e:dc:31:9d:65:b7:e5:4b:2d:0c:
6f:15:01:6f:ea:f7:42:13:b8:19:7a:cb:f1:a8:ac:27:dc:8e:
d7:b4:7f:0b:34:6a:9c:4d:45:4a:42:4d:0c:fc:cb:c8:68:5f:
59:83:cf:c4:f4:26:0a:62:77:c0:cd:d0:b4:a0:b3:5b:18:e2:
ef:c6:28:23:cf:3f:09:17:dd:bf:d3:61:04:be:42:ae:c5:1f:
f5:74:83:a9:b2:8c:53:d8:4a:f4:91:7b:cc:a1:2b:43:0b:37:
48:ec:de:af:67:89:ed:0a:99:07:bf:65:f2:5b:4c:e4:16:7e:
e0:b9:2d:78:6d:db:41:b7:d1:4c:7a:88:88:57:e3:06:6b:55:
5b:e3:28:76:fd:76:f1:10:d8:6b:36:30:f6:51:1b:8d:54:2b:
00:1b:ca:5a:a7:e1:e1:d0:d5:a4:bc:12:cb:48:f4:e0:ee:b6:
33:8f:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:58:35 2025 by rpki-client