Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa
File: 67997ea0-d09c-3c09-826b-b8693975ef81.roa (raw, json)
Hash identifier: duLGWYgC5pvyfJY5i0FI6wqOqUonIljXW5o1inkG7pg=
Subject key identifier: 98:5E:5C:60:13:1F:95:4F:C0:86:B3:26:60:EF:E0:D4:CE:41:D0:EA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848B78B8FDEFA21A36C1C070600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa
Signing time: Thu 30 Jan 2025 14:00:51 +0000
ROA not before: Thu 30 Jan 2025 14:00:51 +0000
ROA not after: Wed 30 Apr 2025 13:00:51 +0000
asID: 125
IP address blocks: 2001:470:33a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:8b:8f:de:fa:21:a3:6c:1c:07:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 30 14:00:51 2025 GMT
Not After : Apr 30 13:00:51 2025 GMT
Subject: CN=1fb4d933-e6b0-44a6-a1a4-c58c0b460caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3d:89:dd:c1:e1:da:77:07:b3:89:df:3b:8f:
6f:ee:69:1e:68:ca:e0:99:49:d9:48:e0:71:6b:93:
b2:6c:0e:43:8d:f2:9b:98:f1:43:21:35:0e:61:d4:
14:e2:ab:64:c5:54:57:94:da:bd:ab:d2:40:12:f4:
c8:47:16:12:b4:c8:3d:e2:1b:e7:8f:e0:c7:99:b5:
58:76:94:d7:9b:7e:d8:a7:d8:1a:a6:ad:02:de:89:
dd:ec:33:9f:57:36:69:b0:04:d4:c3:69:7d:e6:f3:
37:23:10:62:51:5d:a4:00:7f:66:ae:93:bc:fa:6f:
37:db:c4:a9:96:62:22:87:c7:41:b8:79:69:e9:e7:
33:0b:c0:00:bd:23:64:c5:0c:cc:a2:a0:3f:c2:70:
a9:87:a0:08:3f:b0:8f:e8:c7:fa:14:27:fa:27:fe:
d8:92:2d:ce:d0:d4:88:77:53:2c:20:57:8e:ec:5c:
10:da:7d:23:51:90:34:cb:d0:4b:f1:e4:43:08:6b:
88:68:5b:13:e0:7b:78:e5:32:8f:63:da:94:21:3e:
b5:2a:78:b6:ea:c2:35:21:82:88:ea:81:62:e2:05:
86:3b:a8:e1:ae:79:2a:97:bc:7c:22:fd:92:74:32:
c9:94:4c:68:2a:f3:ea:0f:32:57:41:5c:d0:3b:33:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:5C:60:13:1F:95:4F:C0:86:B3:26:60:EF:E0:D4:CE:41:D0:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:33a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:db:48:15:3c:06:ad:4d:98:47:c7:e1:24:ef:6a:c9:ae:e5:
3d:ad:6b:07:96:c6:e6:5c:5a:7f:5f:a9:39:17:cb:33:d1:b9:
fb:69:8b:50:d5:57:c0:95:68:37:1b:66:0e:36:c0:7c:8b:07:
8a:30:77:7b:d9:59:e8:01:54:9f:68:26:27:f3:61:e2:11:5a:
3d:5b:49:a0:7f:8c:b5:c0:60:38:b4:41:0e:c2:33:85:4d:cb:
63:0d:2b:aa:8c:51:14:2e:d1:af:51:d4:f1:0d:66:c6:c0:b6:
10:12:a2:52:4f:3b:3c:60:31:9a:b7:ed:6e:0f:ec:47:74:bb:
9d:3e:0c:6e:1e:1e:92:44:5b:d5:eb:ac:f6:4f:ce:55:e5:85:
14:d0:51:5d:09:68:c8:1c:ec:3a:ed:95:84:5b:f5:2c:94:66:
d4:d7:6b:1d:bd:01:15:64:d7:11:d1:1d:00:d3:b5:cf:bd:b3:
4a:a1:92:b5:27:b8:0b:fb:e4:c7:df:f3:87:e7:d4:d4:62:81:
02:f6:3b:52:fd:d4:bd:af:28:da:60:03:65:97:03:75:13:18:
b1:90:50:68:e5:a5:90:9e:c3:c0:5c:30:ef:24:8e:f5:b1:b1:
3c:75:97:6e:7c:95:e2:63:a3:7b:d2:33:0d:77:14:39:38:d2:
70:87:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:10 2025 by rpki-client