Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14bab73c-5930-38e3-bd3c-a77f570c4299.roa
File: 14bab73c-5930-38e3-bd3c-a77f570c4299.roa (raw, json)
Hash identifier: HnoW7xElFvOjPoDgBq8LuaoMroFitrC9/sBJNYHEhrU=
Subject key identifier: E9:41:E7:62:09:C0:1A:E9:74:2A:B9:05:74:96:30:6E:5E:CC:7B:95
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858494FA2926FABEC122E2422AE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14bab73c-5930-38e3-bd3c-a77f570c4299.roa
Signing time: Wed 26 Mar 2025 01:30:15 +0000
ROA not before: Wed 26 Mar 2025 01:30:15 +0000
ROA not after: Tue 24 Jun 2025 01:30:15 +0000
asID: 149290
IP address blocks: 2001:470:422::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:a2:92:6f:ab:ec:12:2e:24:22:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 26 01:30:15 2025 GMT
Not After : Jun 24 01:30:15 2025 GMT
Subject: CN=7890cdd5-d34f-4888-9662-92dad2d7ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:24:97:7b:8e:8f:40:8a:44:26:54:6f:29:
ad:c7:d3:b2:ab:01:ed:81:7a:c7:25:a2:d7:91:be:
dc:26:5e:52:42:ab:37:3a:6b:2e:4d:1a:46:18:ea:
1b:b6:f5:20:22:52:00:c6:3a:df:35:d0:aa:e9:ba:
88:7a:41:84:32:de:7d:60:3d:93:7a:98:9d:79:99:
6e:13:50:55:df:a4:55:34:74:15:0f:8e:f8:fe:9f:
8b:28:ce:31:96:92:b4:e0:8f:15:77:db:ce:bb:24:
49:30:c1:5f:b2:c7:2d:41:5f:31:e8:e5:b0:b0:f1:
6e:de:69:05:3a:12:7d:c6:10:3e:73:5a:98:22:4d:
b4:c7:0e:d5:7b:8b:c6:1b:b7:7e:c8:7f:b2:fc:61:
13:1a:5b:af:e3:5a:00:56:c9:4a:66:1c:1d:47:98:
e9:09:b9:e4:e8:18:6e:95:f9:ae:6d:5b:4b:be:76:
19:e2:5d:c1:ce:00:44:e0:d5:b4:61:22:66:8b:ea:
0c:d9:3c:c0:dc:97:b4:0e:79:ad:ca:cb:fa:71:3a:
ff:6b:d3:60:bf:4e:0b:15:ef:99:51:02:d2:95:f3:
fc:bc:d6:8e:78:92:6a:82:e4:57:66:c7:b2:c6:20:
35:19:87:f0:cb:ec:f2:bf:f7:0f:ec:63:87:ed:86:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:E7:62:09:C0:1A:E9:74:2A:B9:05:74:96:30:6E:5E:CC:7B:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14bab73c-5930-38e3-bd3c-a77f570c4299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:422::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:ef:13:a0:08:dc:7e:bb:1c:ab:98:5f:55:76:19:d9:c3:45:
37:57:b2:cc:1b:31:a4:6b:4c:28:66:11:80:69:27:3a:fa:24:
91:57:fd:e3:3a:51:2d:bd:62:10:f8:52:71:6e:df:1c:18:87:
06:35:76:62:7a:ed:66:8a:32:15:0c:46:60:6d:49:1a:00:fb:
aa:a0:89:f8:4e:03:03:de:f6:43:de:e8:38:2f:d9:a7:5c:bd:
fd:30:4f:64:61:4d:d6:2a:72:c7:70:7b:0d:f6:2d:eb:02:1b:
07:f3:b5:4c:48:11:64:b5:c3:65:a2:d5:a8:7a:f9:e3:4b:d0:
ea:db:71:f5:cf:f7:08:db:9e:eb:9f:d8:ea:f3:96:bd:49:f6:
ec:5f:f3:4e:53:f9:fa:74:a4:96:bc:a3:39:32:d7:0c:28:1e:
6b:5a:9b:35:4c:57:e6:1e:d2:e2:50:2f:62:ee:63:b4:7c:7d:
c1:26:39:d0:de:a1:d1:5b:47:0b:59:b5:8a:f9:10:d5:ef:46:
e2:a9:69:da:d3:19:1e:3b:55:e8:b7:c3:b5:45:1a:be:10:d7:
3c:b5:75:81:1d:dc:1d:85:77:08:85:45:c9:6d:ce:0b:2f:6d:
bf:fd:a8:62:2b:27:8a:99:e2:c6:9d:1e:07:a8:ef:8a:51:6c:
c6:5f:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:44 2025 by rpki-client