Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
File: 90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa (raw, json)
Hash identifier: jfq2a/Baad/6fKmCNglWkNjzhGk3IAPxlOO1M9fH8oY=
Subject key identifier: 8D:6F:3C:AE:9C:20:81:19:A1:01:36:C1:A9:89:F4:9B:64:C6:03:15
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D157A37603F8DE11E900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 36902
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d1:57:a3:76:03:f8:de:11:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=fd4e0e24-eff2-4159-9328-ae6972c5f5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:dc:c3:16:3a:b9:75:1c:c7:7f:f8:42:bb:
76:9c:e9:41:81:65:49:5c:c0:d2:2d:fa:cb:1b:37:
10:c0:5a:d1:ca:1c:c6:7c:53:eb:e0:53:41:b4:21:
10:b4:76:46:d8:27:8f:e9:ce:ad:ff:79:df:ec:a2:
98:72:35:23:26:d2:99:92:ff:45:36:30:c6:33:45:
a1:6e:bc:b5:1f:89:49:fe:bf:97:3f:fc:d7:c6:6c:
fe:c5:47:28:ed:e6:bb:2e:07:f8:1e:c1:44:ef:9d:
0a:ea:73:0c:42:1b:dd:4a:1f:c3:f2:f6:f0:7b:59:
c7:81:5b:c0:00:a1:ba:6b:39:f2:3e:37:d3:24:c2:
a8:a6:48:00:db:f5:ed:a7:6c:38:31:83:8a:e8:f0:
8e:d3:a0:ee:5f:e2:9d:cb:35:c0:d4:7a:fe:5b:cb:
23:05:43:62:00:86:7d:91:a3:1a:7e:66:81:50:58:
4f:5e:f2:9d:55:74:f1:cb:1f:65:5d:f7:3d:63:0d:
4e:94:38:4e:95:b2:55:0f:21:c4:59:1f:4c:fb:99:
74:39:35:cc:d6:cc:db:dd:95:fd:89:86:bf:7f:66:
1b:0c:1e:e6:bf:e2:d4:e4:6e:e2:86:bb:7d:cd:1b:
94:59:e5:9f:e9:cf:95:59:b6:f6:59:ea:b0:69:4d:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:3C:AE:9C:20:81:19:A1:01:36:C1:A9:89:F4:9B:64:C6:03:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:ad:48:d8:e2:97:4e:7f:21:a5:fb:65:57:c0:84:fd:bc:8d:
88:36:f4:22:66:ab:74:88:eb:30:57:41:e3:05:e5:f1:18:1e:
60:aa:cc:6d:f9:1a:3c:d9:0f:77:54:66:b0:29:9a:c2:10:79:
5f:e8:4d:a9:52:d9:12:9c:bd:3e:30:b3:5f:90:47:92:57:60:
25:f3:63:8f:96:29:da:61:33:67:24:69:c5:94:48:e5:4c:6b:
d3:7e:92:5e:11:85:21:f8:c6:58:70:be:fe:cb:ef:83:1c:26:
9e:b1:bb:bb:8a:67:74:bc:ab:11:57:d7:b2:ca:28:e3:7f:ea:
bc:13:2c:a4:62:7c:7f:e9:00:f1:06:e3:28:71:53:fa:c3:45:
2c:04:55:13:5a:92:11:2e:d0:8e:1d:9a:8f:5e:ed:a4:ce:c7:
07:3d:61:20:9c:92:31:03:7d:aa:38:05:a6:f5:78:db:b6:75:
cb:30:f1:dc:62:52:74:d1:1a:c3:94:d8:2e:05:08:aa:1d:5b:
e4:74:d4:16:30:a3:a1:ce:b3:e4:9c:07:3f:6d:1a:1c:97:56:
d8:78:35:b9:8b:c5:d4:97:07:07:f2:6e:c0:fb:0f:35:4f:ed:
cb:76:c5:df:88:79:5e:df:97:78:10:10:a1:10:1f:db:ca:e0:
4d:7e:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:15 2025 by rpki-client