Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa
File: 403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa (raw, json)
Hash identifier: CUfmAsCvCUv/j7WQF1bqOzDKaNjc8OnKp0Lq5fMObnQ=
Subject key identifier: C0:09:BB:1B:0D:BE:B2:BA:B3:09:1E:04:89:72:89:7D:85:BD:B2:4F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926CBD96A335226770A52D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 133398
IP address blocks: 2001:470:288::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:cb:d9:6a:33:52:26:77:0a:52:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=06977f74-46f4-466e-b17c-613cd133ed97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9d:4d:81:86:48:d8:af:f1:55:13:d6:65:8f:
fc:83:95:99:eb:e5:23:5f:10:ef:1c:56:ee:cf:82:
b6:27:72:78:14:c1:35:62:54:88:67:6a:2e:df:34:
b8:3d:bc:cd:36:1b:82:75:35:28:27:e5:b9:2c:cb:
f5:8e:7f:2c:7b:b6:b6:2c:c2:cc:4d:49:a3:18:68:
38:f3:a1:18:f8:dc:7c:d4:5b:57:02:43:04:dc:4c:
da:42:1a:d8:83:c8:50:cd:b2:41:a4:bf:ce:9d:be:
31:7d:18:fb:8b:89:6e:84:de:77:6a:c6:49:d5:71:
c5:c1:c7:e0:e7:49:f1:4f:7e:33:f1:ec:cf:9d:c4:
46:9d:46:7d:08:cf:44:75:01:28:bf:0e:81:18:6f:
17:15:ee:58:ec:99:cf:d6:f2:84:ac:6e:b3:b0:4d:
0e:bc:15:f7:33:ab:ea:04:00:3c:ed:6a:00:47:bf:
d0:a4:8e:52:b8:d3:e3:48:23:26:02:59:d6:21:54:
fc:f5:01:2d:ca:8f:41:e1:f2:8b:e1:2b:87:5e:77:
b8:64:2e:d4:73:3d:dc:53:30:b5:3a:5c:91:4f:32:
d8:d5:aa:a9:45:e0:a6:1c:9d:4c:de:04:00:3a:f2:
ae:df:65:e4:4d:04:22:b2:1d:a3:aa:c9:a2:ca:38:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:09:BB:1B:0D:BE:B2:BA:B3:09:1E:04:89:72:89:7D:85:BD:B2:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:288::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:64:22:67:18:6b:62:5e:e6:5c:f3:d2:94:c7:c8:32:97:6d:
f3:4c:2a:db:e5:8e:ac:aa:2e:eb:52:93:a6:26:06:4f:22:e6:
a1:7b:2a:44:e9:0c:72:03:41:f6:06:e6:e2:2b:dd:d5:2a:c5:
28:7b:bc:d3:db:76:97:74:05:80:cb:d1:36:fd:ee:e7:42:10:
e3:a9:a1:8a:c6:17:e2:ff:11:74:cc:e0:d2:56:74:7e:5c:b8:
94:2f:e8:73:8e:e3:3f:b1:62:b3:25:03:2a:00:bb:ae:69:b2:
e0:df:ce:94:33:ad:8d:93:58:fd:10:a7:00:e9:04:d6:50:b4:
20:d6:31:83:55:9a:3c:68:46:8b:40:36:d1:14:73:d7:b0:29:
1d:93:b1:53:7c:06:41:5c:9d:f8:2c:7f:ea:d7:9a:b1:99:84:
fc:0f:98:1a:8e:09:f5:08:d2:03:34:5f:5f:f8:11:85:46:4e:
12:68:4d:5b:92:56:51:b6:00:a0:76:67:9b:b1:cf:2c:a0:9d:
8d:63:9d:9a:ba:da:e8:3e:a7:3f:c4:a3:09:1b:38:5f:c4:ea:
3b:eb:ab:25:41:22:6c:3b:b5:54:48:34:22:b9:72:8a:5d:f8:
0e:13:ef:e6:f1:45:75:84:07:bf:13:97:cf:df:a0:c9:2c:50:
1d:97:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:45:11 2025 by rpki-client