Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa
File: b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa (raw, json)
Hash identifier: MeBTxLaNyPBGGJQFFTDCNSSXgITH6Dgjtr67D6u0sGk=
Subject key identifier: D7:95:56:BB:DA:87:D2:A7:C4:C2:EA:E0:2E:BE:67:8E:66:7F:E7:16
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E38846714C66A18416B0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 50023
IP address blocks: 2001:470:23f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e3:88:46:71:4c:66:a1:84:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=b3349936-0751-4642-a698-532e47c7ab07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:7c:69:db:6f:09:f1:b8:b7:db:ef:e1:aa:
10:98:72:bf:73:46:c7:cd:bc:03:fc:2e:96:0a:24:
8d:5a:df:c2:dc:ea:95:1a:f5:b2:28:4b:86:80:bf:
bb:09:1d:dc:ca:05:e3:1d:00:8c:96:b0:b5:0a:1b:
9b:35:08:6b:e1:b7:6f:dc:75:81:10:24:bf:dc:4b:
bb:30:ec:ad:2a:fd:d9:64:cd:4c:88:7b:16:ed:db:
eb:22:8b:f2:a9:ae:62:fe:89:56:89:3e:3c:a1:f6:
c3:81:e8:cc:96:ab:68:ca:28:d3:dd:d4:f9:82:a4:
8d:8c:cd:b2:a4:16:66:d8:eb:9d:23:cd:14:a0:2a:
68:07:20:db:81:d6:df:ee:c8:55:7e:74:60:46:d6:
51:1f:25:61:e7:6a:6e:74:52:58:56:10:c0:9c:aa:
d7:ec:1a:24:2c:86:ee:92:61:95:5f:78:4c:06:56:
8f:e7:30:48:42:8a:44:b4:c8:fb:52:93:0a:01:82:
c5:8a:9b:f5:4d:ed:b4:7f:2c:d9:3c:28:e1:ca:24:
b2:1a:d0:d8:a3:ad:d8:17:e6:eb:53:5a:a8:1c:e4:
e5:e2:c1:ec:26:0d:80:f6:8d:a3:63:cc:ad:94:64:
07:0f:c8:c8:97:d1:7b:86:a1:a5:87:04:a9:0b:e7:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:56:BB:DA:87:D2:A7:C4:C2:EA:E0:2E:BE:67:8E:66:7F:E7:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:af:1e:89:26:58:7c:81:d4:66:84:95:d2:a7:51:c5:a5:87:
9d:40:e0:36:c3:c1:d0:b9:a2:7d:09:b1:09:5e:fa:6e:fb:29:
4e:ca:c9:94:af:74:10:b8:37:6a:e4:39:4e:04:19:31:21:7e:
6d:b4:7f:23:b5:1e:9e:59:72:a1:1d:87:8f:7c:5b:dd:be:1e:
65:89:ee:4e:60:95:c9:05:1c:fb:7f:58:a0:64:68:d4:a6:1a:
27:56:64:e2:8b:87:fe:b0:77:24:6a:85:85:fc:45:be:c1:98:
50:7a:85:8c:79:9a:49:06:9b:de:cc:ab:aa:69:64:70:98:f2:
e0:67:22:72:19:fc:66:2e:f1:ac:51:68:a9:95:bd:e2:c3:31:
77:2f:18:69:03:ba:f6:a6:80:a4:0d:e7:1e:ed:48:24:af:af:
93:78:e2:57:b8:e5:70:87:8e:8a:bc:9c:c0:31:16:4d:b8:b2:
cb:69:af:9b:bf:52:e5:89:f8:d9:0b:df:bd:98:c3:58:15:35:
15:22:ed:12:4c:25:64:5d:aa:a2:3d:4d:8b:e0:d4:91:8a:3d:
36:bb:7d:d5:34:d6:a9:bc:4f:1b:27:60:3d:e2:c0:f8:17:a6:
c3:39:00:81:bd:8c:1f:d1:8f:56:9b:da:46:74:ff:b7:56:4d:
3b:bf:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:26 2025 by rpki-client