Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af1527cd-5d65-3afa-8bd5-4e01646f96db.roa
File: af1527cd-5d65-3afa-8bd5-4e01646f96db.roa (raw, json)
Hash identifier: OZ0jas9SNioFN8yyyCQsc2ihJhehC/7PezRcI8d1qsw=
Subject key identifier: 9E:17:85:14:C1:7C:34:55:C0:0B:47:FE:9E:84:80:4A:97:CF:0E:AE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858494FA291941AC4112052B24180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af1527cd-5d65-3afa-8bd5-4e01646f96db.roa
Signing time: Wed 26 Mar 2025 01:30:14 +0000
ROA not before: Wed 26 Mar 2025 01:30:14 +0000
ROA not after: Tue 24 Jun 2025 01:30:14 +0000
asID: 149290
IP address blocks: 2001:470:3f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:a2:91:94:1a:c4:11:20:52:b2:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 26 01:30:14 2025 GMT
Not After : Jun 24 01:30:14 2025 GMT
Subject: CN=dcf92d16-271c-49fc-8555-61fb93891fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:8e:b3:ab:ef:04:2f:8a:75:3a:c1:90:8b:
b3:0a:1d:6b:94:dc:56:52:93:6b:7c:a1:47:74:5b:
87:62:c0:17:f9:13:3b:17:bb:90:ba:0c:de:24:b6:
20:95:fb:ce:fe:e0:72:f7:78:9f:94:fd:77:86:62:
c0:58:66:0f:2e:24:0d:d7:1d:3e:0d:e7:cd:56:3b:
7b:63:0e:fa:12:0d:fa:a4:26:9f:86:14:c9:cf:fe:
64:29:cb:a9:a2:7b:2e:17:8b:6e:65:4e:7b:61:17:
cc:2e:be:d9:8d:eb:56:8d:10:84:bc:de:81:e4:b1:
cf:cc:66:3c:56:4c:23:58:1d:e3:39:d3:6c:4b:d5:
61:b2:d3:e0:fa:fd:f1:07:00:0b:55:a3:89:53:37:
c8:c9:cb:74:ae:0d:b6:dc:4c:66:08:c0:83:a9:73:
e0:59:95:99:fc:6c:91:f7:0c:17:c9:2d:f7:b4:b1:
ef:f9:67:43:d0:83:0c:80:62:fe:17:b8:54:a3:d3:
de:d9:6a:5a:cc:7c:a6:5b:fd:0b:58:ba:3f:0d:42:
66:e5:94:33:dd:44:3a:7b:47:6d:4b:09:47:64:c1:
5e:97:38:b6:74:af:69:1b:7b:0c:77:09:48:30:21:
0b:23:39:ec:50:5c:e2:a2:b1:ca:90:d9:b1:b4:d8:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:17:85:14:C1:7C:34:55:C0:0B:47:FE:9E:84:80:4A:97:CF:0E:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af1527cd-5d65-3afa-8bd5-4e01646f96db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:8e:08:f8:82:24:c9:32:a1:f1:bb:e8:a6:0f:2c:53:e4:e9:
cd:75:53:9c:8a:f9:05:52:d0:1b:53:f2:e1:89:0c:a8:6f:73:
c5:68:51:39:23:32:2a:f6:0e:07:e4:9c:72:37:80:ca:de:02:
dc:12:47:7d:24:41:42:c4:80:53:41:c4:b9:12:98:98:d9:7f:
13:31:f3:51:4f:f5:59:ca:93:85:4a:71:3f:18:51:64:08:c3:
ec:70:27:9d:4f:40:8a:47:ca:e0:b1:08:6d:49:74:4d:c4:cd:
33:df:33:60:c7:c4:b8:33:94:59:6a:a9:e3:8b:db:8a:5e:cd:
b4:21:f4:d0:e8:ca:42:18:ec:dd:74:e3:68:41:c4:fc:69:26:
55:f5:6a:a6:fb:24:29:48:67:c2:13:47:28:ee:82:7d:74:43:
83:08:c2:9f:24:d7:41:57:e6:b0:81:88:b0:ce:d5:c1:bb:cd:
38:91:39:0d:7a:07:40:28:4f:cd:3a:0e:65:d1:18:6a:dd:bc:
4e:d0:cd:8b:da:32:bd:98:27:71:f1:d2:58:14:66:05:a6:66:
f1:9e:70:14:8b:66:de:6b:0e:77:17:97:e8:8e:2c:27:7c:5e:
86:af:00:77:34:3b:88:6c:86:8e:d4:a6:82:ff:fa:e5:8e:cd:
eb:ee:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:08 2025 by rpki-client