Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa
File: 3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa (raw, json)
Hash identifier: oEiP+Ka5fTB6hbm8e03PQJjosM3AZj8Ndi5M+IR7BHM=
Subject key identifier: B4:CC:64:E1:17:FF:44:4D:8A:94:07:BD:42:28:C2:1F:E5:2E:B0:B1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E8BAA36F1327DDEABF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 31942
IP address blocks: 2001:470:69::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e8:ba:a3:6f:13:27:dd:ea:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=7ba229ed-4202-4bc5-b4ab-d547f54fe7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:00:75:22:63:bb:c9:9d:31:bf:e5:72:1f:
79:43:e2:65:b9:41:8c:c5:a3:2c:b5:ca:6b:cd:30:
55:8b:b0:23:fc:84:11:96:d4:ef:f1:95:29:a6:29:
b0:2b:3c:2e:db:28:24:8a:81:fe:1b:e6:fb:96:08:
71:cf:72:69:d2:91:fe:79:cc:d9:22:09:3f:b0:62:
07:f3:4b:07:cd:0e:8f:67:0d:ec:64:8f:7b:25:ac:
96:86:1b:5c:de:78:bc:fe:2c:c2:9f:28:21:1f:30:
d5:41:05:21:2f:86:5c:ad:ed:89:26:96:b9:b3:ae:
ad:df:7c:e2:7b:95:43:b7:08:13:55:1b:c4:6d:60:
c2:39:2b:9c:90:79:14:7f:1e:88:35:cc:24:bd:3e:
53:de:ea:23:c8:cf:0c:fa:28:af:84:92:ce:6a:b5:
d5:80:73:cf:8c:5e:65:be:57:60:8b:d2:e5:bc:1f:
e9:bd:20:80:54:ab:0a:18:4a:f3:ce:e2:c4:37:28:
7d:a4:ce:f5:4c:23:7f:98:dd:ac:d1:bf:58:e7:8d:
7e:9d:c9:1a:40:05:40:1a:69:7b:b3:21:00:43:7e:
1d:95:fe:85:64:b3:e7:3d:3f:78:c3:fd:fa:07:09:
0c:47:0a:72:f3:6a:14:da:40:22:a1:e8:56:38:5b:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CC:64:E1:17:FF:44:4D:8A:94:07:BD:42:28:C2:1F:E5:2E:B0:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:69::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:c4:23:3a:b0:54:5d:e5:41:f1:b6:78:e4:bb:45:9d:cb:9b:
fc:3b:54:66:fc:88:97:44:a5:92:8c:91:39:6f:5e:14:21:1f:
4a:68:16:d7:89:e9:01:85:40:99:e2:4f:b5:68:ab:dd:90:55:
50:a6:6b:a4:c9:23:a5:7d:23:41:ec:59:37:aa:c9:7a:9c:5a:
c1:73:fc:11:84:bb:2c:5d:30:f5:4d:7d:0c:f4:77:4c:50:c3:
30:5e:74:24:35:bb:a1:f9:94:59:01:9b:97:42:28:1f:dc:57:
10:67:30:ee:5c:36:03:89:d2:89:89:cc:ae:40:f6:e4:c3:22:
82:5a:7f:41:d7:b2:ec:48:95:3b:c9:39:d4:dd:77:66:3a:e3:
1f:c1:75:ae:4b:94:ab:bd:64:73:0f:bc:b8:c9:79:17:32:05:
e3:00:22:18:d9:82:60:c5:1b:b3:00:7d:48:29:0b:7d:4a:7a:
42:03:8b:09:f7:49:ac:18:6c:e9:35:98:61:aa:50:bd:84:87:
12:6e:60:3e:e7:71:24:16:b6:56:36:14:cb:4f:c4:4b:69:2e:
dc:09:74:77:27:6b:20:99:d4:1f:ad:fd:6c:f6:c9:f0:d0:7e:
dc:e6:f2:8d:13:98:91:46:1d:c9:6d:40:78:80:09:e4:a7:84:
90:31:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:50 2025 by rpki-client