Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584301c1-15b5-3123-ad92-46d1ae136fab.roa
File: 584301c1-15b5-3123-ad92-46d1ae136fab.roa (raw, json)
Hash identifier: rfb8oJx3D+8b/5xh3EGq8xevycItKeEwcN5k05I3mTc=
Subject key identifier: DA:15:37:4C:DD:FE:D1:AB:20:3D:9C:EB:76:E9:A7:1B:3A:94:04:1B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DEBE0BC248F21503F700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584301c1-15b5-3123-ad92-46d1ae136fab.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 394256
IP address blocks: 2001:470:1d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:de:be:0b:c2:48:f2:15:03:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=d7116bd4-7074-45af-b483-da222657cfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:53:9c:d4:2e:8d:01:9f:b0:da:fd:0d:cc:
80:70:00:e1:d7:ed:5c:01:19:40:14:5f:d0:ad:5c:
4b:97:df:64:c8:86:23:97:fb:18:bd:cd:b6:7e:58:
5c:38:ad:d5:0a:6b:d9:69:45:15:70:a0:2a:61:2a:
10:aa:36:f1:7a:74:e6:6d:0e:8f:fd:af:44:14:3b:
5e:1f:e5:69:26:6d:79:94:93:c8:d2:5f:7d:ea:be:
5e:e1:7b:e4:82:77:63:28:6f:26:9c:5c:b1:28:64:
ca:9d:ab:0b:6d:23:f8:12:a0:59:db:fe:c9:ef:dc:
e0:d2:62:c2:c2:54:97:3a:79:52:0d:fc:22:a3:c1:
ff:a7:c1:6b:cb:16:e5:f3:18:33:3a:3f:59:9d:06:
cb:b7:49:0b:33:bb:b5:23:c6:a6:28:2b:0f:74:97:
b7:35:74:19:12:9e:4a:1c:a9:7a:e2:95:43:c2:38:
3a:f4:95:62:8f:b0:b2:10:2f:40:ad:fd:42:49:0b:
8d:99:08:be:5c:e2:b6:58:ee:ad:36:32:1a:d1:f1:
b7:54:85:8d:f6:88:12:47:75:31:34:90:22:a8:23:
58:6a:8e:ea:a7:9f:85:0a:3e:90:29:ea:9b:e6:d7:
c9:b8:12:c7:5a:dd:df:f0:e7:ee:5f:f2:80:89:bc:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:37:4C:DD:FE:D1:AB:20:3D:9C:EB:76:E9:A7:1B:3A:94:04:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584301c1-15b5-3123-ad92-46d1ae136fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1d1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:8a:85:99:a2:4d:e8:8e:c7:68:94:89:5b:5d:7a:43:c0:1d:
9c:98:d4:d0:af:4b:43:7b:89:1f:50:e5:f5:b5:85:5c:a8:0c:
1f:ae:b3:09:89:a5:75:2f:34:9e:47:29:2b:ce:72:50:92:1b:
25:d0:b2:87:4d:c0:61:b4:e2:84:a4:c8:8e:57:d0:05:77:1a:
6a:93:61:5e:ee:7d:ce:70:49:28:81:17:81:90:48:d7:de:c5:
8b:2e:81:c7:b7:d6:43:bc:df:77:00:8d:15:bf:d1:17:c1:24:
a3:44:17:50:9a:67:98:3f:0b:c7:6b:b1:4d:d9:67:ea:47:c3:
e7:53:36:e1:dd:2a:4f:5a:07:a5:38:42:e9:17:3c:09:06:fd:
f0:ca:eb:28:15:02:2f:ed:18:52:fe:fd:48:26:60:47:0a:38:
6b:59:4a:a2:e6:23:b1:6f:13:7f:7a:9b:cc:80:35:f0:58:d9:
5a:4b:cb:3f:a3:06:65:2f:f6:0b:d2:82:85:37:18:e4:c5:92:
25:8b:2a:88:9f:5a:7c:9e:b4:e0:66:31:82:ee:52:81:e0:24:
af:a3:a8:89:bb:33:d9:ac:9d:87:1d:e0:b1:a7:9f:ee:80:f2:
40:f6:db:09:e5:5f:0b:0a:a3:c4:5f:2a:e3:33:92:47:7d:cc:
54:65:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:27 2025 by rpki-client