Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66ca3204-0138-3e44-ad0c-2a123cf1c20a.roa
File: 66ca3204-0138-3e44-ad0c-2a123cf1c20a.roa (raw, json)
Hash identifier: vr1JtnBaYpAA4AxaVufNP06CIQ76xZfwjp+QLA7jm2M=
Subject key identifier: A2:82:43:BB:EC:59:39:9C:84:DD:E5:D0:C8:55:B7:81:EC:E4:73:4B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858488815DDC6D0B2CCCA66DD6E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66ca3204-0138-3e44-ad0c-2a123cf1c20a.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 31989
IP address blocks: 2001:470:2f8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:dd:c6:d0:b2:cc:ca:66:dd:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=c04c5141-9330-4612-b97b-120dba694176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:32:62:7b:aa:f8:d2:1a:b2:c7:b9:1d:7f:
d4:63:32:9b:42:a7:58:d0:a7:34:33:65:fc:0f:ae:
e5:f1:37:5b:0c:e9:7a:fb:f0:38:3c:7a:e2:6c:68:
bf:f7:58:f5:96:ed:32:0b:72:66:8c:f4:39:80:cf:
80:5b:d7:a0:62:f4:85:b6:ac:26:09:24:be:b6:2f:
4f:c1:23:f5:6f:9e:8c:30:b7:f5:94:8a:c6:ee:09:
42:d0:b4:89:99:60:a4:e5:d4:8b:87:da:7b:91:43:
2b:ba:f7:5d:bd:45:d1:6b:49:6a:3e:82:71:2b:45:
e3:8d:33:e2:34:dc:f7:21:c1:ec:46:97:cd:b0:94:
51:e2:48:dd:94:89:03:1a:70:fd:08:6b:bc:3c:40:
c2:45:02:22:41:7f:ae:48:58:09:11:74:13:04:79:
6b:d1:e1:bf:61:b3:9a:37:f1:d5:fb:d4:60:a3:4b:
ed:06:5d:b0:89:d3:46:98:27:c6:88:31:2c:00:97:
1a:2d:f8:db:8a:63:8c:de:80:f8:f5:61:73:21:c1:
7d:3f:8c:f0:d8:c6:d8:0a:97:e5:44:2b:77:2c:90:
b9:cf:ff:e8:77:0e:29:0d:70:f0:af:72:0b:6f:b7:
34:32:16:c7:5c:95:3d:35:f5:bc:0c:b9:3e:e2:68:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:43:BB:EC:59:39:9C:84:DD:E5:D0:C8:55:B7:81:EC:E4:73:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66ca3204-0138-3e44-ad0c-2a123cf1c20a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2f8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:01:17:ec:46:43:e0:19:39:ce:03:1d:9d:19:fc:d3:00:30:
db:b4:91:a5:c9:81:10:d7:4d:3f:cb:2b:e2:bc:f1:f4:63:38:
dd:e2:76:58:14:dc:0a:4e:bb:8d:57:2e:df:44:a1:f6:bf:8b:
51:b7:c1:33:03:a2:3b:07:47:93:e8:d0:a1:19:1d:b6:08:55:
3a:22:de:2a:4e:f6:f6:86:0b:92:12:b2:06:eb:e4:31:7f:40:
e8:92:b5:ea:2f:d4:c3:fc:10:46:27:5f:71:bf:b3:64:5e:3e:
2f:f9:51:82:78:48:c2:9f:60:74:4a:34:a0:68:43:39:e5:3e:
27:b9:40:78:ae:fb:79:2f:4f:41:a8:86:88:7d:50:5d:b4:aa:
2d:90:ab:3f:92:67:9e:e2:75:01:fd:bd:0d:8a:22:d1:1f:e5:
60:6b:ae:d7:bf:87:1c:6b:27:4f:31:5d:75:ca:cd:93:a9:64:
82:31:fd:c2:65:88:94:e3:69:37:ed:28:3f:b1:91:ca:72:75:
79:5e:b2:93:ff:ac:05:56:2b:1b:13:4b:12:38:a8:86:c1:e0:
c6:b1:e3:a2:3f:95:a3:97:8e:7e:40:33:dc:35:76:d2:a6:53:
2d:fa:b9:2e:a8:04:b5:ed:bf:bf:38:47:43:80:ec:82:f7:fd:
95:13:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:25 2025 by rpki-client