Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19204759-106a-3b12-889f-80cbf585f897.roa
File: 19204759-106a-3b12-889f-80cbf585f897.roa (raw, json)
Hash identifier: 11fR9U2RBFBckrMseLXbrNPBthyNXg7iexzv/JA+syY=
Subject key identifier: DF:8E:EF:2A:C2:E8:41:82:AC:72:52:16:45:DE:CE:B3:C9:D1:B3:9F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E46E292C85BACEB07980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19204759-106a-3b12-889f-80cbf585f897.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 6204
IP address blocks: 2001:470:27c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e4:6e:29:2c:85:ba:ce:b0:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4e218722-804d-4be7-8964-f666f06dd8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:49:7f:95:6f:b4:27:1e:0f:3d:fa:50:5b:
e7:00:86:3c:47:75:81:3c:6c:a2:38:69:fe:e5:40:
86:43:7b:de:1f:4c:7c:2d:c0:4c:e6:d0:e3:d3:91:
d5:7f:d3:1e:74:de:ec:89:a9:57:3c:c9:31:a1:d5:
91:e2:0e:43:d9:83:e8:ce:81:71:7d:60:7c:9f:3d:
cd:74:d9:59:6a:95:62:07:2b:77:d2:9d:5c:63:0e:
4b:e6:f0:6b:00:f6:28:55:8f:82:55:aa:bf:f2:bb:
46:ef:ff:4e:e5:9f:28:61:39:ec:3a:b5:9c:4b:ec:
0f:cf:97:44:2c:0d:ce:ec:c7:4a:93:a3:03:6a:ae:
c1:c1:5c:3d:86:66:aa:df:ba:4b:17:33:d5:90:a5:
ae:08:f9:14:26:fc:b8:93:7b:d5:56:4f:36:aa:cc:
48:f4:92:7f:45:c5:40:16:95:2f:d7:ca:ab:04:9e:
47:f1:f5:1b:72:55:95:ab:cf:98:e4:2a:8e:bd:bc:
58:3a:ef:54:33:6e:e0:42:b9:e1:dd:0e:9e:39:20:
0f:99:3e:3d:33:8e:5c:0c:e6:31:6e:83:07:77:06:
e2:54:e7:e8:bc:d3:1c:1e:b1:79:8c:b1:c1:e9:f8:
12:7e:1b:5d:c7:01:84:a9:3b:89:99:e3:8b:ce:84:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:EF:2A:C2:E8:41:82:AC:72:52:16:45:DE:CE:B3:C9:D1:B3:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19204759-106a-3b12-889f-80cbf585f897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:27c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:68:d7:9e:d8:23:5f:de:9e:be:fb:8b:e7:bc:bd:3e:d6:80:
09:22:45:c7:1f:60:72:7f:e2:22:a2:31:dc:73:55:e2:1a:12:
e5:49:46:e3:10:37:28:20:b1:76:e5:13:1f:67:3f:91:2d:a6:
75:e7:5c:e7:7c:58:96:15:3c:0d:6f:64:cc:cd:e8:f2:2c:6a:
99:85:19:91:0f:3e:7f:3c:0c:c1:43:52:55:e4:71:5e:95:69:
cf:e7:1d:17:36:ea:cf:a5:ea:bd:27:9f:db:03:6a:f1:08:e2:
60:f6:cb:9c:f4:e4:84:bb:44:f5:9f:a7:55:d1:5d:0c:f9:6d:
e6:03:64:c2:72:59:e9:0b:8a:e0:94:1b:c6:28:a7:70:f3:82:
21:a7:41:a6:af:a3:68:f1:37:5e:f4:fb:46:07:f7:bc:cc:0a:
c7:26:89:a2:3a:30:9d:92:b6:1d:17:9a:c8:92:ab:f0:98:bc:
15:0c:5b:c7:2f:b2:d4:01:9e:9c:92:26:02:92:a1:37:cf:0b:
e6:bb:dd:b3:88:cf:f7:25:57:d7:a8:49:07:02:cb:b2:97:29:
18:04:89:dd:97:d7:47:c2:57:1b:8a:4a:fc:a6:9a:d0:55:d5:
57:bb:74:b7:ce:b5:4e:aa:0d:94:b1:57:fe:41:77:a2:f6:87:
7c:cd:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:36 2025 by rpki-client