Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa
File: a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa (raw, json)
Hash identifier: tYWybJ5bR/McojzT8HLoE/hyuQdrsnQ/MQKT77xcbx4=
Subject key identifier: 8A:AE:8B:AD:B0:64:BB:3E:AD:FB:97:0C:D6:20:C8:45:5A:EA:C9:3B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D76AE9D5FFCE5988D9A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 393350
IP address blocks: 2001:470:58::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d7:6a:e9:d5:ff:ce:59:88:d9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=e5bfdb2b-e22d-4300-a855-bcec35aa672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:a6:28:13:d9:a0:eb:b1:e6:95:15:08:94:
9e:06:d5:c5:42:78:15:d8:cf:c5:a5:61:4f:5f:3e:
43:d2:09:de:68:5e:67:08:e2:68:83:ec:ab:56:3e:
85:fb:dc:3d:d0:be:ee:9f:b5:53:b5:9e:f4:53:05:
34:e9:18:26:f4:8b:97:35:40:e5:75:fa:c3:b7:08:
16:1c:f8:c2:0a:d6:c9:1e:0c:e0:47:b4:b7:fc:d2:
46:76:4b:b7:c1:93:70:26:33:5e:e0:02:c7:b4:60:
f5:8c:bb:96:ee:dc:a2:3b:b4:ca:cf:72:cc:67:8d:
57:e9:dd:31:84:f1:56:24:e1:99:36:de:2d:8f:63:
42:47:b9:f4:89:f7:e8:f6:75:af:49:54:b5:27:bb:
1f:bf:c7:9d:35:35:54:6f:05:c6:9f:93:df:eb:1b:
10:2d:c4:40:b8:4f:a7:fa:cc:dd:38:8c:0c:fd:e3:
d0:be:a7:ab:4e:03:84:5a:b4:4a:e2:c2:16:b3:91:
32:66:35:a8:b9:27:92:53:43:d0:eb:eb:af:ba:73:
08:26:72:fa:41:4e:69:fd:0b:7c:b0:d3:cc:6f:69:
f1:8c:62:26:5d:df:05:72:b3:4f:bd:b5:d5:54:3c:
86:92:f8:02:fe:aa:da:63:b7:9f:1d:9b:a8:a6:7a:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:8B:AD:B0:64:BB:3E:AD:FB:97:0C:D6:20:C8:45:5A:EA:C9:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:58::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d4:0e:17:ec:65:4b:fd:f5:80:37:46:99:af:3c:55:d6:ef:
3c:93:a6:83:8d:aa:42:cf:d2:07:48:65:c6:66:d0:37:45:47:
79:da:c1:e5:ce:9f:26:93:73:d0:eb:f2:d6:76:b0:01:f7:9f:
29:53:fe:94:3b:d1:ae:ab:86:5a:23:0e:5d:12:31:df:17:b9:
e5:8c:e9:f8:2a:cd:41:2b:21:f6:dd:04:e6:9a:d9:77:2b:cb:
06:1e:39:23:b6:cc:5c:3e:14:25:57:07:cc:fe:ec:88:de:e0:
c1:f1:82:21:6f:7f:c8:0c:f9:b1:ac:17:46:55:6d:d3:b4:41:
b0:a9:40:da:7f:ac:f9:33:e9:29:14:a3:69:4b:4e:b5:c7:7d:
b5:63:7f:c5:47:1a:0c:b1:ca:84:90:5d:d8:05:95:96:bf:a7:
06:81:ed:9b:0c:e2:30:ef:17:a8:20:01:f2:10:6c:4c:8b:17:
76:14:f3:29:8e:2a:35:68:83:90:bb:d9:0a:d8:bf:3f:c1:e2:
34:66:cc:69:22:8e:96:90:82:18:03:9d:54:bd:54:42:93:a5:
45:ac:5f:c2:f2:34:6b:f7:14:8d:68:c9:5f:2b:02:68:56:9e:
c2:39:e0:9e:6c:88:63:e9:8a:20:c9:68:8e:31:2a:52:a0:60:
61:34:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:20 2025 by rpki-client