Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/883ad1ce-8738-3986-a2a3-3cd7ecab38e7.roa
File: 883ad1ce-8738-3986-a2a3-3cd7ecab38e7.roa (raw, json)
Hash identifier: MUDRnQbosbs2Xhjmp3GhHlFtsAykPG/3/VEHSwFmw/4=
Subject key identifier: EF:C1:81:15:3D:A9:22:34:EF:19:E4:86:A4:CF:43:32:BB:14:BF:BE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C10EE071C9DC2EAEF620
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/883ad1ce-8738-3986-a2a3-3cd7ecab38e7.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 31769
IP address blocks: 2001:470:137::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c1:0e:e0:71:c9:dc:2e:ae:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=f9c3db58-2af9-4a4e-89af-43921bedc97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:ca:5a:fb:1a:da:a3:eb:6e:22:24:b4:a9:
44:f1:84:df:5f:73:75:ec:dc:4c:7f:49:04:f6:ea:
7b:de:17:a7:85:87:53:e7:35:52:e3:b4:27:72:c0:
20:1f:a4:38:66:4a:5e:66:b2:6e:f8:dc:02:fe:e5:
6e:d6:59:fe:a9:4a:2d:54:45:1b:4c:2f:b0:7d:4e:
e4:98:19:40:88:1d:98:1e:cc:b3:d4:42:f2:68:83:
9a:29:1f:66:62:7b:8c:c7:d4:4c:74:cf:0d:5b:59:
bb:2f:9d:ea:41:80:96:fc:21:58:31:36:44:4b:17:
3c:e6:3d:e7:19:47:13:2c:f4:0c:3c:43:7a:73:73:
c8:b2:58:9e:ac:9e:14:eb:01:fd:83:16:8a:4e:69:
a0:97:6d:bb:31:95:ec:cf:f6:d7:0e:d9:db:4a:b7:
4a:61:09:b3:57:e5:1f:03:8a:80:fa:7b:57:50:d3:
36:0d:10:58:37:3a:14:91:16:b1:43:81:8b:66:9b:
fd:9b:aa:4d:4a:79:49:91:9a:51:15:4d:f1:bf:d7:
1d:d0:9a:48:e4:6d:5f:34:e8:a3:b6:dc:a3:b1:13:
14:74:99:df:63:47:a8:80:aa:da:3e:e2:54:92:67:
62:42:3c:ba:5d:d8:3c:b9:19:db:d4:8f:c9:47:bf:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C1:81:15:3D:A9:22:34:EF:19:E4:86:A4:CF:43:32:BB:14:BF:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/883ad1ce-8738-3986-a2a3-3cd7ecab38e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:137::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:58:b8:a8:3f:ba:71:5f:36:dd:75:9a:de:52:c3:9b:2c:96:
bb:9f:6e:ab:d2:f4:c9:b0:66:24:bc:a9:8f:b6:c1:b2:19:3e:
5f:49:6f:84:7a:db:d5:69:ad:a3:96:12:7a:a6:08:1e:39:32:
4a:05:55:1e:97:75:03:87:d4:08:6e:4e:0c:df:11:37:0d:de:
70:6f:ad:20:70:a8:91:f5:e1:be:98:f0:00:c3:ca:64:f5:ba:
fd:36:e8:1e:8c:49:97:d7:13:10:49:15:c5:4b:66:25:01:4a:
bb:a1:ac:ec:d5:0d:28:5f:af:61:b1:67:b7:6a:c5:fe:a4:b9:
28:b1:e1:61:41:16:51:a2:8d:e5:25:8f:61:5a:e7:25:5b:2d:
83:47:c5:67:37:4d:8b:fe:58:ef:9f:88:72:9c:bc:13:c9:ad:
44:4b:d1:a6:9d:b7:01:12:23:8b:96:ab:0b:83:11:20:93:31:
cf:c8:d3:a5:ff:3d:d5:36:12:77:02:03:97:70:48:d0:62:94:
4a:fb:ec:ab:52:77:a5:9f:92:18:66:ac:68:56:e0:fc:e5:dd:
ce:a3:b2:85:b2:06:38:23:12:90:a1:d0:39:12:85:8a:cf:ad:
f8:49:34:03:60:6d:b7:75:4b:d2:0d:71:f7:5a:25:c5:df:3c:
df:d5:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:51 2025 by rpki-client