Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e806ef6-6123-36a8-80f7-a22fabad40e2.roa
File: 4e806ef6-6123-36a8-80f7-a22fabad40e2.roa (raw, json)
Hash identifier: 6Mrb1fHimNt4a8gFGSC5svn09Xb/kMdlkDvCO9g1aK0=
Subject key identifier: C0:C5:16:B0:AC:DB:B1:93:1E:F4:65:DC:D4:17:DC:47:52:DA:8A:1A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C46E76ECC467A2697B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e806ef6-6123-36a8-80f7-a22fabad40e2.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 56468
IP address blocks: 2001:470:181::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c4:6e:76:ec:c4:67:a2:69:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=8e6a241b-a061-401f-9365-d8d5fa8d236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:0d:88:b7:b2:a7:2e:d7:c9:8c:b3:f7:03:
0e:de:55:df:d3:cd:9e:a1:f6:0d:19:a6:f4:b0:48:
0f:b1:75:0f:49:fe:f8:7e:f7:5b:b4:41:a6:d6:17:
05:09:e8:ff:2c:68:a5:28:a7:75:38:9f:4f:58:ce:
52:27:08:70:30:0b:8f:49:ce:b9:f1:28:4e:26:6e:
f8:9c:18:25:ed:b7:f1:fe:96:dc:87:fd:c0:ea:d4:
36:95:37:a4:ac:63:0c:92:91:13:a2:bb:d1:a2:76:
14:71:a0:d6:1a:a3:74:93:42:ac:45:4d:72:dc:07:
b4:ea:30:a8:28:5d:b1:8b:ee:8c:a6:ce:e8:23:50:
d1:52:68:92:00:3d:e3:f3:c2:5b:01:11:da:64:9d:
41:e0:5d:73:00:f5:7a:9d:9f:33:34:db:5a:d8:c7:
a1:c6:da:20:65:01:d8:65:d1:33:c8:af:f9:60:b8:
73:52:81:9c:77:18:3c:42:d7:34:24:cf:ea:e4:6c:
d4:50:14:21:40:76:19:3f:b6:9d:46:3d:40:ea:d8:
cb:29:a6:94:5e:b2:08:75:1d:58:05:e0:1f:d9:08:
e1:86:ea:a3:64:ab:26:fb:af:97:46:59:7e:75:b0:
42:e0:e5:44:19:fe:3f:01:84:85:ac:83:0e:1f:53:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:16:B0:AC:DB:B1:93:1E:F4:65:DC:D4:17:DC:47:52:DA:8A:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e806ef6-6123-36a8-80f7-a22fabad40e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:181::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f9:56:d3:b3:df:89:b8:39:ac:79:b3:8c:28:c4:a2:ed:c2:
4e:f2:d5:2a:87:b4:13:5c:c3:ff:32:b4:ca:1c:03:46:ed:59:
49:4d:96:60:95:9a:00:b0:15:14:36:95:02:46:40:8e:8a:53:
55:e6:45:6e:21:2d:03:99:4f:6a:55:bb:8d:b2:37:00:b9:75:
77:b6:f7:ea:c1:b4:3b:77:1a:d3:e5:51:49:80:5e:88:98:80:
47:6f:f7:1c:5a:d4:e5:8f:8c:0b:d2:f1:91:39:98:23:06:b2:
d9:5f:3c:77:e2:ce:d9:3f:a1:13:88:d5:2f:e8:9f:c6:ec:bb:
71:ad:bb:b7:b1:49:0a:c6:f6:c8:c3:ee:2a:83:63:4e:78:02:
89:ab:69:15:a3:d5:51:10:1f:04:92:28:10:ba:4d:eb:a5:92:
f5:38:8f:29:28:29:b7:fb:af:ed:f2:91:dd:37:83:36:91:97:
af:5f:4d:91:a6:a6:12:a9:81:68:2f:9d:04:13:69:35:3b:51:
19:cb:60:be:3d:e2:bc:21:8e:41:2a:19:b1:29:c5:cf:7e:80:
33:c1:36:1a:93:0f:89:2c:fe:c3:ae:b9:a2:d7:9f:83:04:1e:
4f:f3:01:df:ff:2c:b8:e4:ef:64:7b:4d:3e:07:a2:4a:8c:57:
f9:e4:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:27 2025 by rpki-client