Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3782c552-b5b7-3922-8821-45dce86963a3.roa
File: 3782c552-b5b7-3922-8821-45dce86963a3.roa (raw, json)
Hash identifier: z3azYUP3TzT+T2XYiHm8nEl32ugGvv3S2RhInSlI+jI=
Subject key identifier: E1:08:42:49:69:CD:46:0D:0E:AA:D1:44:69:C9:F8:DD:70:8D:9D:98
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DBB87D8F4A7338D5BE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3782c552-b5b7-3922-8821-45dce86963a3.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 64238
IP address blocks: 2001:470:b2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:db:b8:7d:8f:4a:73:38:d5:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=dc6a5119-641a-47bf-8863-ca2c4581d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:28:e4:1d:e9:c3:eb:d7:30:19:b4:7b:78:
ba:4d:06:b8:ce:1e:43:c9:a0:dd:5b:59:f6:54:ec:
b1:85:5f:e4:c8:1b:ef:80:34:38:0e:c7:64:72:9a:
fa:96:eb:ff:d3:5f:0a:2a:f5:4d:28:87:ac:9d:4b:
e4:73:68:68:cf:64:82:1c:01:d7:64:c4:bf:e6:64:
e4:86:3a:9e:3d:78:3f:38:30:1f:e1:46:a4:19:5f:
72:11:b8:2c:18:14:c5:dd:43:e4:88:5b:9b:74:c9:
63:3a:5c:ef:c0:38:6c:09:03:bb:59:5b:ca:22:01:
08:97:a6:66:d5:fb:73:5d:cb:fd:c8:18:13:15:f5:
cd:78:76:d9:65:45:7f:2e:78:33:0b:b3:43:2a:49:
05:9b:40:7e:9a:79:fc:45:f1:d5:9c:29:28:a4:3f:
07:c1:44:c9:3c:25:cf:2d:cd:4a:96:84:3d:d2:99:
29:9e:a5:f6:1c:4a:52:df:be:2e:b2:e6:3f:26:8d:
46:c1:e1:70:e7:4a:25:ad:5a:58:1d:92:2d:a7:03:
fd:ca:7e:66:6f:7f:9f:e7:a5:46:95:aa:ee:16:7e:
a7:af:99:4c:fc:9d:ca:86:79:c4:05:52:30:46:df:
e2:f6:c6:33:68:5a:74:6e:00:f0:a1:2b:5d:a8:f1:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:08:42:49:69:CD:46:0D:0E:AA:D1:44:69:C9:F8:DD:70:8D:9D:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3782c552-b5b7-3922-8821-45dce86963a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:0c:61:38:6e:ea:d5:b3:6c:b5:99:0e:c1:c2:d7:1d:17:5e:
24:ce:e0:3e:e2:89:3e:e9:f2:00:da:ad:77:60:6a:3d:2c:ff:
c7:3b:89:97:00:29:f9:ff:45:b2:c4:66:73:ce:e4:32:12:16:
4e:0b:ab:7f:56:ba:59:8e:c0:ca:93:13:69:38:87:94:48:16:
14:26:7c:ab:df:ca:ca:29:06:9e:c3:00:d3:02:fa:69:c0:1d:
db:a8:ba:cf:65:1d:11:84:ab:45:80:76:2b:03:b3:82:d7:ca:
89:1b:9a:98:7d:4c:6d:fe:c8:aa:37:03:68:c1:92:f3:cb:5c:
86:36:e0:3b:9b:6d:09:b3:c2:87:da:72:8a:f6:5a:9a:4b:2d:
41:de:3f:18:37:85:8d:3c:5b:9d:0c:be:b9:b0:e6:ff:eb:d6:
28:63:3d:f8:bf:6d:b5:cb:72:c8:65:1f:6e:0e:9a:1f:a4:47:
c0:7c:63:af:c4:28:bf:a2:e3:22:d1:72:fe:e5:ba:32:bb:ac:
ad:c7:20:d0:c7:82:2e:5b:89:b2:3c:65:bd:b3:05:a1:35:9c:
63:46:c9:13:46:06:62:b2:8e:77:c9:ec:d5:b6:b1:8d:9b:38:
5d:50:c3:4f:8b:a9:73:45:1c:5f:92:07:38:91:86:5f:a6:90:
b6:8e:29:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:09 2025 by rpki-client