Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa
File: 4d40b93d-acec-38dd-9713-18db9799f2d9.roa (raw, json)
Hash identifier: nwEx+HVpmUTczkDwLLF2ZU6qgG4eqZ7QYsiujarSpNc=
Subject key identifier: 71:24:4D:90:E6:9F:AD:93:32:8B:D2:6C:34:86:C8:C8:61:D7:86:B3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926CC38D5039C954B00D4A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 20432
IP address blocks: 2001:470:295::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:cc:38:d5:03:9c:95:4b:00:d4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=45e68b13-25d6-4fc4-b1f6-4dce51802066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:66:bc:9a:b8:de:3e:3b:a2:1f:9f:9b:0d:
9a:ef:c5:bc:bd:20:79:28:05:2b:9c:30:c1:48:3c:
d2:dc:87:82:48:3d:4a:01:30:15:bb:73:a9:01:3b:
45:e2:ad:cb:94:30:6b:7c:97:b0:92:4b:f1:51:76:
73:36:30:90:3f:ac:c5:ef:6c:27:c5:ae:b0:fb:49:
94:77:ab:33:b0:92:dd:12:ae:d9:ad:8e:88:6d:29:
94:b8:aa:9f:f9:5a:ca:0a:1e:45:91:c9:15:b7:4b:
37:07:fc:39:56:8c:ca:02:61:6a:4d:74:40:aa:e3:
86:ff:00:bd:ff:06:17:06:cb:7b:ba:6f:6e:12:12:
76:2b:54:bf:cb:e3:87:3a:f6:50:fc:04:68:36:31:
ec:9d:b6:c1:ac:23:46:a1:b7:42:b4:62:5d:64:c5:
fa:37:b9:01:a8:b2:98:9a:91:60:53:ce:82:79:27:
90:7d:ef:8b:b6:93:c1:55:3d:37:bf:b6:09:a1:f2:
9c:fe:f4:60:fa:b8:42:fa:ce:61:85:00:a9:31:66:
5d:d4:57:90:ac:d1:14:54:57:99:53:c2:35:d7:b4:
2b:8a:1a:9a:af:f8:1a:65:92:42:ee:f2:79:3d:39:
80:b8:1f:13:51:29:ae:42:58:4a:13:e1:f6:70:e2:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:4D:90:E6:9F:AD:93:32:8B:D2:6C:34:86:C8:C8:61:D7:86:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:295::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:66:ae:f5:53:e8:02:a8:8d:08:e5:05:62:96:43:37:3c:78:
5b:63:cb:2f:48:e2:75:9a:a8:42:be:ee:25:2e:ca:8c:58:99:
92:87:04:60:1c:12:cb:cf:7f:63:99:47:5c:d4:c6:1c:12:89:
3f:73:57:21:8b:ec:80:5d:18:4b:4c:26:2f:f1:32:4d:22:6b:
c1:5a:0c:f7:12:76:42:e3:29:71:fe:10:90:1e:3b:88:99:22:
83:35:3c:70:ae:10:df:c9:ef:81:29:3d:d6:63:e5:d3:19:b7:
5b:37:86:d0:96:bb:3c:7c:80:9f:67:d1:fb:7b:46:a5:a5:29:
5d:7f:7e:06:0b:84:6e:5e:d8:5a:27:36:5c:6e:92:7f:6b:57:
22:59:88:7b:6e:97:b0:d7:01:37:27:c5:01:35:4a:32:1e:6e:
2a:84:a6:17:20:df:4d:4f:7b:da:55:36:cd:46:a7:f4:7f:3a:
69:b1:52:b7:17:78:dc:00:73:01:bc:83:d3:71:ab:79:92:8c:
89:ad:74:da:0d:5d:00:35:66:0e:57:6c:67:a9:8c:f2:c4:ca:
80:a1:73:90:ca:42:f2:7b:ea:66:0b:b7:95:52:cd:25:f9:35:
a1:9f:b1:40:98:01:01:ae:b6:de:24:bc:1c:d1:40:24:e4:bf:
78:fc:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:35 2025 by rpki-client