Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa
File: 5c8cb131-3314-3c54-bc89-56e52d45561a.roa (raw, json)
Hash identifier: w7WQKh0H2g/5Hjj7VHcKqhcnarJ+M5yWD3uUJ6qJL7g=
Subject key identifier: 82:41:46:12:FF:4D:85:CE:8C:7F:71:71:B8:CE:60:BC:67:90:12:06
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BECEA450BB985EF29880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 398297
IP address blocks: 2001:470:81::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:be:ce:a4:50:bb:98:5e:f2:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a93f6f19-6692-49cb-ae1b-867c0d32bbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:00:dc:a2:db:22:1f:79:84:d8:fb:bc:ca:
65:72:f7:5f:1d:ee:0e:e5:04:f6:03:95:29:64:3a:
71:09:8f:65:fe:23:85:e5:f4:80:d3:de:99:a0:d4:
40:c5:8a:60:9c:81:63:73:58:49:3f:cd:cf:8d:8b:
00:26:e2:c9:38:02:cc:6f:c0:47:be:24:39:35:f7:
19:8b:fd:4e:ea:86:c5:83:a2:d3:ef:9f:93:bd:90:
47:34:3e:42:a2:52:5d:50:b3:14:f9:3c:00:a6:98:
aa:d8:ad:ee:01:de:59:37:31:f1:99:73:5a:b2:61:
0e:b4:0b:85:cc:8d:b6:34:76:4e:4b:19:93:c0:82:
62:2e:a1:39:bc:7c:3b:03:b4:ad:60:28:f7:c6:ba:
c5:3f:f4:64:05:e6:c3:b9:3e:4a:7a:f6:77:d9:27:
60:3d:fa:4b:38:a2:51:37:bb:c3:8a:51:3a:35:d6:
7c:66:a4:00:52:ab:a3:89:eb:2d:07:08:2f:1e:64:
de:7a:78:6e:7c:37:20:58:8f:bf:09:78:8e:3a:e1:
cc:b2:0f:89:fb:db:ba:18:40:f3:03:f2:0b:c5:ca:
49:e9:2e:47:f2:7d:43:9b:ce:2f:e1:f4:4f:98:d2:
c1:26:02:ac:f8:eb:93:5e:4e:c6:f4:d5:5e:3e:ae:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:46:12:FF:4D:85:CE:8C:7F:71:71:B8:CE:60:BC:67:90:12:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:81::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b7:44:b4:b2:cc:76:e4:90:64:3e:02:38:07:90:3c:b9:22:
1b:a5:04:72:1c:60:2e:76:32:33:28:0c:30:6f:06:a2:1a:dc:
84:8c:46:26:fd:07:ec:df:9a:9c:40:7c:33:6a:0c:79:2f:5d:
78:cc:7d:38:7f:99:27:0a:4e:b8:a4:bf:79:92:3b:25:55:a8:
d7:e8:5b:11:89:c5:73:c3:e0:28:e1:1a:03:04:6f:4e:2f:79:
85:80:42:a6:b1:b9:2b:c3:e1:a6:1d:9e:fa:95:b0:8a:e5:c5:
66:4b:ab:31:cc:b6:16:75:09:a9:1a:32:e1:be:f0:aa:59:68:
67:bd:1d:da:6d:4d:6d:93:f5:fe:21:51:73:76:c7:b1:75:da:
e5:e7:3d:b9:d7:4d:be:6f:c2:55:ec:3a:70:ae:43:1f:79:a0:
6d:8f:fd:6a:7e:48:fe:7c:c8:0a:be:19:87:59:cf:b5:8a:15:
61:7c:6c:ef:6e:c1:1f:ab:1a:55:3e:8e:95:85:4d:e0:aa:90:
8d:c0:51:5a:38:36:90:ea:4b:fd:ed:45:17:bc:2e:ed:79:75:
ed:3e:f9:08:bb:6b:9f:49:2d:18:4a:cb:3e:c3:81:3f:63:1c:
6d:b7:38:74:d1:d8:7a:ce:a0:e4:47:35:c6:80:1b:a6:36:dc:
42:76:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:58:35 2025 by rpki-client