Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa
File: bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa (raw, json)
Hash identifier: yBRZ6jOciUVKlu9YfceBuG34ts1tyHeF1Zsm3ZaVP40=
Subject key identifier: 14:36:DB:E1:E1:43:AB:DD:71:A4:B0:AD:06:CB:3B:63:98:1F:60:0A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584957F40C22C3DA2C46633CA600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 14012
IP address blocks: 2001:470:110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0c:22:c3:da:2c:46:63:3c:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=ad60d991-b365-46bf-aead-cad920da1eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:96:f6:d2:79:fd:63:d1:1f:94:86:a8:4f:
ea:fe:cf:24:5e:75:d7:8d:27:78:38:85:3e:74:c9:
86:c8:0d:05:b7:69:f4:cd:dd:27:53:52:61:7a:52:
85:c7:3a:30:f7:90:7a:2a:b5:c1:71:ee:15:d6:55:
24:c4:66:8a:ea:a2:aa:ef:0a:e9:9b:80:80:97:35:
57:33:0a:a8:4d:4c:3b:f5:55:7b:3e:f7:ef:00:11:
6b:7a:64:3a:88:60:29:a5:01:02:82:ce:f2:a0:e0:
45:d9:34:b4:8b:d4:f9:9e:78:ab:55:33:35:4c:d6:
ae:80:a1:c8:54:fa:4a:da:58:c8:15:76:3c:f2:74:
0f:a4:da:51:f7:2a:20:85:f7:1a:4b:93:52:d7:80:
73:3f:95:e2:30:1f:73:84:c0:06:d7:97:5a:b1:8a:
52:a7:5d:a0:42:92:59:83:88:65:68:c8:94:3b:cb:
53:7b:bb:d7:e2:2b:e6:74:5a:7f:0d:68:c9:e7:5e:
63:aa:9c:77:3f:0f:fb:ca:43:b3:fd:15:b9:72:75:
8d:54:76:d7:92:f9:8d:ef:5f:a9:e4:a0:4c:59:e3:
15:93:6f:05:aa:b1:78:3a:cf:aa:83:ff:ae:ab:45:
e9:a9:01:8a:5b:2d:c6:94:a0:9d:3b:b5:cf:29:5e:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:36:DB:E1:E1:43:AB:DD:71:A4:B0:AD:06:CB:3B:63:98:1F:60:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:110::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:a4:0a:5e:05:63:2d:52:60:53:a9:f7:c1:e2:04:68:03:a2:
d7:82:41:fe:71:e5:33:5a:9b:12:09:e2:a8:f9:f8:64:12:08:
74:b4:c7:12:cd:ee:14:46:27:47:68:35:d6:62:83:23:db:87:
14:16:24:ee:6d:c4:12:62:ec:1d:80:82:98:7d:1c:e2:b6:44:
85:0c:cb:88:ad:b7:68:57:b6:f6:35:ee:db:68:03:5f:5b:5d:
7a:75:8d:aa:cb:20:81:18:27:c4:87:fb:11:ef:da:ca:b1:86:
58:99:8d:b0:38:7b:4a:b7:01:2b:61:01:12:90:93:34:a4:6a:
59:d4:36:38:ae:41:89:b4:72:f1:4e:bb:d7:5f:35:b7:b6:5a:
7e:34:85:e8:1d:c6:7d:7d:e6:a4:13:14:39:db:22:ef:cd:78:
b2:66:3b:19:e8:9d:8e:3b:ac:ee:62:6f:50:c2:47:8b:eb:b6:
ef:e4:30:f7:2f:ca:27:12:ed:b2:67:a0:76:79:f0:18:cf:eb:
53:50:3a:80:77:4b:35:8a:fc:b3:21:4b:28:db:45:84:dc:35:
29:5f:40:b8:58:89:35:e0:ea:69:46:bc:f2:ca:d7:f9:04:78:
f5:9e:55:b6:d5:ac:82:f3:e2:b4:d9:fb:76:d9:f5:89:93:50:
36:b1:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:53 2025 by rpki-client