Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/469bf5c7-1361-3055-acf1-b1a0f6b63853.roa
File: 469bf5c7-1361-3055-acf1-b1a0f6b63853.roa (raw, json)
Hash identifier: I8IQZkEdVRr9TViKAkXvlYPqLqzyAFy0ULJbPSeQHFY=
Subject key identifier: 0B:4E:41:E3:28:BD:EE:61:CB:DB:B7:C1:7D:3B:AE:8C:C4:D4:2C:3A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DEE7D06D6332AEA04D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/469bf5c7-1361-3055-acf1-b1a0f6b63853.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 15353
IP address blocks: 2001:470:1b4::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:de:e7:d0:6d:63:32:ae:a0:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=3dd858ba-182f-4076-9d42-738d64d39c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:77:ed:74:73:fc:6c:c6:a8:a9:9c:34:5a:
9b:9d:e1:94:bc:77:22:8d:59:61:35:21:9c:8a:96:
78:a8:16:61:7d:6b:e2:e1:ca:71:76:31:ab:3a:aa:
4e:8d:bb:c0:55:c2:05:3c:de:31:1d:20:6e:de:4b:
bf:7e:c0:8a:35:67:f0:ed:45:98:30:18:b5:80:fc:
92:74:64:94:ca:e5:4f:37:b5:fd:d2:fd:60:84:5c:
16:31:65:09:b3:c3:31:f0:eb:67:3a:83:35:a1:64:
39:b6:3f:00:e2:9c:9f:22:1c:99:2c:d5:5e:38:aa:
60:96:01:61:93:b6:ab:71:21:cb:0a:98:aa:b4:c6:
16:fb:71:08:19:98:ab:28:c5:c4:06:4c:7e:34:91:
d7:2d:22:65:3b:1c:8f:86:f3:8d:54:00:f7:41:cb:
3d:6d:56:65:2c:86:24:68:90:31:8a:4e:63:7e:a8:
f0:bd:c5:bc:d0:38:68:d1:db:ac:9b:be:42:de:71:
f0:0b:4c:34:a4:ad:06:f1:f6:95:a0:d5:d7:bf:7c:
fd:3f:6c:4e:8b:11:8c:ff:da:b2:4b:d3:0c:f4:ea:
2f:04:ea:31:e7:32:97:00:8e:55:ae:0a:27:e1:0a:
91:6b:98:4f:86:b3:0c:c4:12:b4:cf:95:16:bc:c3:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:41:E3:28:BD:EE:61:CB:DB:B7:C1:7D:3B:AE:8C:C4:D4:2C:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/469bf5c7-1361-3055-acf1-b1a0f6b63853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1b4::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:60:c5:1b:1d:59:e1:eb:df:41:fb:ef:7e:be:5f:b7:30:55:
20:c0:17:26:50:44:02:fc:a0:f5:29:a1:a6:e2:f5:0c:79:6c:
f0:9a:3a:c3:5a:e5:d0:20:cd:71:f4:c3:bc:6b:58:1d:01:57:
46:92:cb:07:6d:35:58:a8:c2:bf:44:2d:38:13:0f:43:e7:c1:
60:6f:3d:8a:0c:fb:0c:95:17:ea:6d:a3:5e:5b:12:bd:5f:2b:
30:ae:36:be:fc:4d:9f:b7:2e:15:bf:12:bc:25:88:eb:8d:5d:
67:23:0a:a9:01:9a:f2:82:08:f0:21:a3:f8:c2:29:4d:80:8f:
2e:12:31:80:f0:33:74:9b:0c:ce:05:26:e6:63:50:01:ae:40:
59:b6:16:65:47:ae:d5:b6:47:e2:cc:e8:32:23:93:1b:99:7f:
c1:27:a8:e7:75:d6:db:6a:fb:05:a6:d4:53:0b:a6:d2:83:c4:
2a:0d:3c:03:db:5b:5d:0e:b5:96:88:42:46:23:f5:c5:a8:26:
4d:f9:45:5c:e0:16:25:7e:96:02:0b:b9:bd:fa:24:cc:07:82:
73:5a:3c:87:be:f5:49:3c:69:16:21:5d:9e:e6:0a:cc:4f:1b:
63:06:9c:bc:98:a3:4b:10:ca:b8:ee:51:4a:b4:3f:e3:83:0c:
cd:ca:f0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:46 2025 by rpki-client