Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/666a7cfe-5ac4-3b8a-96f6-1572da986351.roa
File: 666a7cfe-5ac4-3b8a-96f6-1572da986351.roa (raw, json)
Hash identifier: WTSFaQy3+8uRjq0Ud29rEi4cwGd2E1tn6r3men3fZhs=
Subject key identifier: A5:5F:1A:2E:F0:B4:B7:6D:0B:CC:9D:A3:93:67:07:55:8D:6A:9A:F0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848C582373FCDB40893BF367C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/666a7cfe-5ac4-3b8a-96f6-1572da986351.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 206804
IP address blocks: 2001:470:374::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:37:3f:cd:b4:08:93:bf:36:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=1551a1a1-582a-481c-96c8-616d596ec825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:b9:23:b8:12:41:24:9a:91:6f:b8:33:6e:
ce:73:69:ec:7a:94:be:1b:ad:ce:18:ca:cd:ba:59:
f8:76:f3:06:06:ff:7c:f6:53:b5:34:ae:36:cf:fd:
26:43:f7:0b:45:7e:f4:e8:6a:0a:8d:83:38:0f:58:
6b:1d:f1:36:09:63:8e:84:27:57:cd:97:36:0a:8a:
8d:78:f0:26:50:53:90:5e:58:b5:ca:24:2c:00:fa:
b6:17:c7:2c:a9:68:8e:18:e5:d8:45:1d:04:0c:31:
6b:41:2e:2a:1e:9c:b0:7d:71:28:ba:bd:55:d8:ae:
59:75:00:a3:4e:a8:2e:22:47:c2:f6:1f:00:78:25:
c8:90:39:92:58:c0:c3:12:6d:f0:f8:72:51:04:c0:
f2:a1:6a:d8:2d:ce:83:32:41:2b:0a:4c:dc:af:f4:
63:0c:80:0d:5b:2a:20:c2:a1:e8:2a:9b:a1:70:d5:
e9:47:7f:fb:b3:2e:d9:33:61:61:11:d7:8a:ac:45:
67:98:02:6f:f0:49:8c:ac:7a:f9:8a:2f:c1:33:1c:
f6:81:e5:79:67:94:3f:9b:ab:e2:62:2e:f4:e2:71:
7e:4e:fc:5d:89:a9:ef:77:e0:6d:9f:c8:b7:0c:a4:
38:24:1d:61:54:76:7c:03:29:02:f6:0d:57:3d:18:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:1A:2E:F0:B4:B7:6D:0B:CC:9D:A3:93:67:07:55:8D:6A:9A:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/666a7cfe-5ac4-3b8a-96f6-1572da986351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:374::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d9:51:d8:b6:1c:ad:8f:03:8f:97:ed:7c:a8:43:4a:b8:b5:
07:84:33:fe:6a:42:c5:19:7a:b5:75:7c:05:19:dc:37:67:c3:
c4:0c:62:ce:42:20:f0:25:b2:93:b9:6e:06:04:77:ed:d5:3f:
cc:8d:b2:92:0f:97:cc:06:d2:b1:76:70:78:17:56:20:25:fa:
d1:82:dd:fb:f1:89:c9:d7:72:0d:9e:0a:c6:46:d2:69:12:f5:
72:dd:29:23:e3:06:82:23:36:08:e1:8e:07:ff:f5:6f:16:cf:
b0:a4:0f:6f:f4:ef:34:34:16:36:30:e1:0d:ec:fe:a4:ca:3c:
ee:9d:87:99:86:7a:5e:3a:ee:ad:fa:07:aa:22:a3:e8:c0:28:
6d:9f:c8:35:6a:a5:d0:f0:38:53:8d:c1:ed:5d:b0:80:64:70:
8c:92:f2:f8:2a:b3:b5:f8:33:a8:4e:a4:74:cc:10:66:d8:4e:
58:f8:95:4a:ec:51:64:3a:01:ce:3b:73:28:db:ad:a2:34:46:
8a:61:56:1a:35:af:5d:29:a2:32:28:f4:9c:69:4e:bf:c2:6b:
c4:fb:7c:61:27:61:88:2a:5c:c1:c8:0a:33:72:33:d7:8c:ef:
f4:a2:fa:e2:11:1d:cc:81:1e:80:ab:0e:8d:60:be:38:d5:e6:
60:a7:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:13 2025 by rpki-client