Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa
File: 844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa (raw, json)
Hash identifier: k8bg4CDjlglm4/LfmV/5QkAWE84p3lhRWQy6C9z6VIQ=
Subject key identifier: 92:FB:19:4E:63:F1:B4:EE:39:9B:85:B7:E2:46:00:97:BA:C8:CF:CF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E3943AF49037A74D9980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 151374
IP address blocks: 2001:470:b4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e3:94:3a:f4:90:37:a7:4d:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=3a5c7a74-dc99-4a8d-956a-dec2545a5efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:ab:25:8f:74:00:57:9a:70:97:8a:a3:1f:
7a:45:3c:6e:96:8f:7a:31:28:b9:b9:0d:08:fe:f7:
47:92:24:18:5c:c3:90:dc:b4:a3:7c:55:43:62:ee:
27:52:b6:d7:d1:f7:ee:d3:3a:50:71:60:1b:c8:3b:
32:f8:90:b4:90:2d:21:86:17:ff:e3:dd:ff:8f:59:
0f:0b:d7:b7:d6:f3:f3:53:41:2c:ab:eb:df:1d:75:
0d:3c:9f:b8:c7:93:27:5d:23:4c:b4:91:99:1c:3a:
bb:d9:d1:a6:7b:78:25:89:12:ff:77:ba:55:f1:28:
44:d2:41:41:fb:56:ac:e1:9b:eb:d2:34:03:b2:3b:
c6:1d:3c:77:88:7b:bd:d0:60:f2:b7:9c:d4:78:e8:
b5:3e:cc:12:11:ed:ad:89:22:96:e4:87:e1:a9:f7:
6a:67:94:c8:f9:f0:37:9c:5c:41:cb:1e:00:0c:92:
68:86:5f:4b:1d:41:19:dc:4b:19:18:41:f0:a6:2f:
36:9f:53:8d:79:6a:e6:f8:68:a3:ec:24:2b:51:68:
0b:3f:35:61:d6:e9:d4:cd:2a:01:77:75:7d:b3:5f:
96:81:ed:24:15:76:a7:c5:43:a1:d6:d9:ef:ca:0a:
29:61:24:40:e2:14:2c:0c:3c:02:82:d9:7a:d0:22:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:19:4E:63:F1:B4:EE:39:9B:85:B7:E2:46:00:97:BA:C8:CF:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:82:a6:d2:77:53:c8:88:ef:49:1e:b3:a2:20:f1:66:8f:5b:
b1:41:78:a4:04:28:87:6d:b9:c2:12:d5:54:cb:eb:12:31:25:
da:cc:1e:b9:b0:0f:08:07:4f:ec:ce:86:bf:a4:0b:bc:47:87:
3f:30:d3:fa:21:93:a4:be:40:bb:c2:44:1c:45:1a:8c:8b:cb:
31:aa:2f:fa:88:06:02:9e:71:bb:bd:10:fa:9e:82:b7:2b:ce:
29:d6:bb:b4:5d:44:cd:18:04:b8:24:23:dc:9e:9d:b8:45:16:
0d:bd:ca:ec:54:0f:9b:b9:dd:89:7c:e4:36:20:f3:55:12:f1:
c6:bb:28:38:58:23:46:0f:94:49:45:07:56:fc:a8:22:ff:9c:
8a:27:8d:9a:82:27:d8:8e:f0:7a:15:87:64:8c:53:36:2e:7a:
65:15:82:bc:e3:ea:7a:38:71:96:48:04:af:e3:5e:90:bf:76:
a4:cf:ee:b3:f8:3e:0c:fd:d9:e4:78:13:ff:30:61:cb:f9:32:
20:20:fc:b3:33:3b:d9:36:45:f5:72:47:97:83:bb:eb:c7:e9:
ad:f5:b7:84:a8:f1:69:d9:b7:4c:31:bb:68:f1:db:46:0e:9c:
1f:07:74:4f:e9:99:57:e1:53:04:69:4a:18:01:72:cd:5a:62:
d0:bc:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:10 2025 by rpki-client