Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9da1da4-6220-31e5-8686-3aa5d7f597ec.roa
File: b9da1da4-6220-31e5-8686-3aa5d7f597ec.roa (raw, json)
Hash identifier: njDuAOKVWBqnTSP4+jfR7fVIC8NmkeHDjVKHBucwo6I=
Subject key identifier: BD:60:8A:7F:0A:86:7E:B5:EF:17:AE:FB:8C:A0:C3:15:E1:1E:67:6F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926CADE6D80BDFD212CAAC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9da1da4-6220-31e5-8686-3aa5d7f597ec.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 54900
IP address blocks: 2001:470:270::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:ca:de:6d:80:bd:fd:21:2c:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=5cae1d73-64ce-4412-b712-5268efb6bb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:5d:07:22:da:2c:cd:1d:a6:f5:3d:39:57:
48:20:3a:01:2d:42:ec:65:93:87:87:1c:4d:98:39:
53:10:d7:50:de:16:bf:3b:46:27:ac:4e:f3:e1:05:
e1:95:f6:4f:ec:95:23:d2:93:b5:4b:64:aa:a6:92:
f5:84:ef:22:cf:7a:ec:36:68:85:6c:cb:5f:6c:30:
6b:37:2f:c3:91:8e:1e:8c:ae:a4:65:64:a5:fc:1c:
bf:40:de:21:9c:29:dd:50:a0:91:8e:51:b6:4a:02:
08:da:a9:06:df:2b:a1:70:7e:ea:9b:22:67:33:b5:
38:c1:7a:09:7c:20:82:f0:ab:7c:cd:8f:9b:b9:24:
69:a4:02:51:18:2b:f2:31:a6:5c:5a:48:cb:17:f6:
64:5a:0a:b1:17:af:23:9f:ef:f3:e1:f3:f4:f7:62:
a1:01:53:68:03:6c:30:ff:1d:95:2e:80:91:f4:10:
de:c7:bd:e1:d1:93:54:b9:e1:40:77:1b:b3:bb:c9:
de:10:c1:8f:ca:f0:23:1c:22:33:10:86:47:12:39:
e9:df:8d:52:84:d4:a4:d5:06:dc:0a:73:49:39:50:
05:48:e0:bd:8d:ba:aa:c1:6a:73:31:d7:76:fb:7d:
d7:c7:6d:12:31:1b:ff:13:18:34:da:d5:73:bb:f7:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:8A:7F:0A:86:7E:B5:EF:17:AE:FB:8C:A0:C3:15:E1:1E:67:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9da1da4-6220-31e5-8686-3aa5d7f597ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:270::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:72:c0:f0:46:85:83:54:c1:48:a5:12:59:66:97:b5:94:03:
0c:98:a0:9f:08:da:67:9a:7f:77:a3:59:6e:71:4d:fb:d3:8e:
f9:ad:dd:43:65:35:dc:66:b1:dd:eb:8c:ab:9a:bd:0e:61:c3:
57:80:ec:8a:49:24:e1:01:09:72:71:be:25:56:80:7c:66:bd:
a9:be:67:e1:85:e8:35:90:97:44:dd:a6:b2:00:e3:e2:69:0e:
28:4f:a0:56:68:db:01:95:6f:cd:e6:1a:47:c8:da:e6:95:51:
86:9f:1d:9a:2f:28:fa:37:ba:1e:0e:99:82:5f:ab:67:a7:82:
33:c0:f2:73:3b:77:f6:96:d7:3f:ec:b2:1a:28:9c:c3:13:e0:
d6:3b:fd:9d:08:52:ce:e1:6f:93:eb:98:3f:cd:c6:30:cd:b9:
68:bf:c9:db:8f:07:69:20:2c:9b:39:6a:be:4f:53:af:a5:7b:
53:8f:80:08:1c:96:89:7a:85:16:3a:5a:df:f8:f4:85:07:c3:
47:a8:9b:9c:d8:a3:97:6e:d2:3a:dd:2c:0a:92:d0:fa:d3:5f:
35:67:9d:9e:ad:9d:60:ef:24:8c:76:f0:67:31:f2:0a:c4:12:
75:54:01:d5:16:75:32:b4:17:5f:b0:cc:47:aa:20:0b:af:87:
62:a7:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:19:56 2025 by rpki-client