Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/53e09ff1-d534-3cad-8b3d-a9ca32390675.roa
File: 53e09ff1-d534-3cad-8b3d-a9ca32390675.roa (raw, json)
Hash identifier: rynVkxT8R4JtZzDrizdqaQJ2z8hJsztyuCG0J9wIEjs=
Subject key identifier: BE:D3:30:57:81:89:EC:0A:66:80:5C:23:32:1D:2D:C2:23:4E:4A:8F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DF014B74FCFBF0DD2D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/53e09ff1-d534-3cad-8b3d-a9ca32390675.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 327872
IP address blocks: 2001:470:1db::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:df:01:4b:74:fc:fb:f0:dd:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=7cd17387-9400-49b2-b31c-a82307b0efc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:87:68:b2:24:96:04:d5:23:f9:b9:4d:8d:
70:b6:60:b9:99:92:94:d1:bc:15:23:dc:a3:1e:66:
b3:03:1e:82:f0:b1:c3:07:da:dc:7a:9f:82:73:bf:
e0:bb:d8:d0:a1:cb:d6:19:38:34:c7:a9:33:cb:fd:
8b:83:88:17:c1:45:3e:65:39:a3:2f:c5:94:76:95:
5b:55:a4:06:9d:ea:f2:4b:36:94:e7:47:4a:3a:93:
ab:1e:0d:29:1a:c8:6a:9c:1c:76:0d:46:09:d8:27:
00:3f:24:d9:03:6e:da:15:fd:87:60:82:6f:86:62:
df:fe:68:32:6d:21:3e:9f:fa:c3:49:67:37:d1:1d:
e0:7e:61:55:01:70:ef:47:f4:ef:34:68:da:1c:0b:
0d:e5:0d:25:e0:38:7b:5c:00:20:b7:6b:d3:8a:06:
9e:b0:99:d3:0f:55:02:ca:2c:7d:82:39:b7:ae:06:
1f:53:0b:f0:70:3b:a1:f0:64:de:30:b0:dd:90:33:
32:3e:95:0b:3f:6c:44:bf:ac:0a:0c:1f:41:93:86:
12:58:84:86:ed:9b:96:c6:b8:5c:82:29:b5:e7:7f:
14:f0:cf:c1:83:bb:92:ae:f4:08:7e:b7:bf:7a:bd:
9f:b6:94:40:8d:56:e2:57:41:5c:dd:67:90:ab:59:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:30:57:81:89:EC:0A:66:80:5C:23:32:1D:2D:C2:23:4E:4A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/53e09ff1-d534-3cad-8b3d-a9ca32390675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1db::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:81:a2:eb:0a:23:4a:f9:da:35:28:67:18:a8:43:38:c4:9d:
42:ab:26:4d:9d:48:14:cb:2c:ed:6d:40:30:bf:be:9d:48:5d:
c2:d9:65:3d:fd:0d:d2:81:5e:f7:a2:03:4c:1c:c5:a7:36:f6:
c5:26:e5:e0:2b:b4:93:8b:63:59:66:0a:a2:d5:31:31:5d:85:
a3:53:a8:6b:6a:50:88:59:a5:96:b2:9b:9a:75:f2:47:54:0d:
cd:b5:59:70:2a:5d:8d:5a:90:6a:3d:fc:34:c1:e4:af:aa:02:
b7:26:72:7a:9c:08:f4:b3:61:af:8d:59:8a:f2:82:f4:ad:ca:
12:1d:21:19:07:95:27:e2:68:02:84:8d:67:3f:cd:86:73:67:
de:97:9f:9a:70:0e:e7:56:a7:41:8e:f5:c0:11:3b:35:e5:98:
6a:9d:93:1e:fa:9e:d2:b8:0c:52:79:00:66:72:83:06:21:96:
14:b6:62:22:ef:f5:91:c6:3f:09:20:5a:42:fd:7c:7e:eb:fb:
3a:e9:af:6e:f8:96:de:76:54:96:02:8a:fd:e3:80:c7:63:46:
f3:91:5b:2b:a9:9b:85:24:1b:b0:ba:12:d1:f5:1d:4f:93:82:
50:ed:c2:7f:a9:bd:b4:04:b6:f4:de:69:6a:de:d4:d0:21:e6:
3d:9c:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:05 2025 by rpki-client