Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/729de64a-d204-37af-8dae-fa420f3c70c5.roa
File: 729de64a-d204-37af-8dae-fa420f3c70c5.roa (raw, json)
Hash identifier: ZAsrKRqaLb12RtxUjl/h0n1oeb7znm0u8kYA59zxxco=
Subject key identifier: A6:63:81:DE:88:56:07:77:97:0A:44:E9:B9:E4:97:DD:EE:FA:27:08
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E17E44CFD2096D8B4800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/729de64a-d204-37af-8dae-fa420f3c70c5.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 13904
IP address blocks: 2001:470:22c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e1:7e:44:cf:d2:09:6d:8b:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=2b550f4f-940c-489f-989b-7a567ec7cf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:d2:22:32:26:85:c8:66:ea:90:4f:03:73:
f0:9e:6a:36:d9:e6:61:7f:73:51:02:6e:b1:26:09:
54:ba:1e:4a:1c:49:20:3a:b0:76:89:e9:d6:5c:af:
a7:9b:47:19:bc:eb:6c:2c:d6:cc:0d:06:20:fa:4b:
f7:d1:bb:c2:14:4b:2d:ad:c1:4d:d4:93:82:9e:5b:
02:60:8e:03:fc:c6:3c:ab:75:65:ab:f6:81:7c:80:
b5:9f:25:5e:b6:bd:c4:1d:e6:5b:ce:25:31:eb:52:
9a:48:82:b2:b8:b5:a6:0b:ec:ea:41:9e:c3:29:d5:
95:ce:d6:1b:4d:ad:74:f5:6a:48:8b:96:9f:fa:6f:
64:d8:6a:97:ee:a8:53:13:33:b8:c8:13:7d:8a:14:
ca:1c:7b:c9:8e:48:b5:3f:32:22:d0:31:ab:23:65:
3d:2c:a9:46:ed:3d:7e:78:e1:d9:8c:14:01:7e:89:
e6:14:71:36:fb:70:31:dd:30:3d:c0:68:b1:6c:06:
58:8f:f0:ef:ec:26:e1:f6:09:96:cc:cc:6f:8f:9b:
bc:61:69:ba:e2:2c:e8:84:03:15:76:32:64:54:eb:
b0:16:fe:11:bb:79:42:02:61:e9:50:b1:d4:d2:46:
80:25:c8:eb:b7:33:84:dc:65:21:ef:95:aa:e2:fd:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:81:DE:88:56:07:77:97:0A:44:E9:B9:E4:97:DD:EE:FA:27:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/729de64a-d204-37af-8dae-fa420f3c70c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:22c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:7b:57:b9:4a:3d:e5:ea:db:77:80:c5:4c:8c:21:a6:1c:8f:
ca:ea:87:46:34:79:2f:f4:31:12:64:92:bd:16:70:a7:89:e9:
19:62:1e:c4:19:8a:7b:cc:38:49:78:a2:d8:f5:b3:31:ab:c5:
f9:38:d1:be:dc:0b:a3:5d:72:b0:f7:e5:0c:83:b1:e4:86:0b:
61:39:94:49:62:76:b6:ed:40:38:5f:63:03:df:29:6a:8a:04:
6e:f9:c8:4b:2a:9e:bf:80:37:bb:cb:a0:97:ea:ba:1e:70:c9:
ee:e9:9d:d9:a0:28:b4:8b:fc:1e:30:5d:23:6b:ca:f4:72:75:
66:00:5f:c2:92:15:05:52:38:a1:77:45:72:a2:a5:7f:19:4e:
82:c9:92:d7:20:3f:e0:5d:99:5b:7e:df:e2:d1:4b:16:30:1a:
dc:f4:34:c3:e2:e7:15:f7:c2:4e:59:36:6e:51:6d:ac:bd:49:
5f:79:9e:16:19:c9:dc:11:df:39:bc:2a:e0:5d:4a:41:4b:d4:
9e:11:5c:40:e2:f5:bc:7d:31:25:a1:13:38:63:98:40:2c:52:
be:0e:a3:75:f5:36:c3:0f:0e:e2:9a:05:88:38:74:e5:83:62:
8a:18:53:ab:30:3f:2e:c1:84:d2:38:dc:79:4e:99:72:b9:9e:
74:ec:e9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:33 2025 by rpki-client