Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f31269-a1d9-3a8e-98a7-06e00ed3d9eb.roa
File: c0f31269-a1d9-3a8e-98a7-06e00ed3d9eb.roa (raw, json)
Hash identifier: caOAzBsQh2PCmaY3NtviL6NEq/sGAbYQ+zbkqdSg99U=
Subject key identifier: 57:D8:44:B7:7E:27:A9:B5:DA:0A:C1:20:42:FB:34:C2:36:B3:32:46
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E34F5FFB47F2347F2640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f31269-a1d9-3a8e-98a7-06e00ed3d9eb.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 48957
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e3:4f:5f:fb:47:f2:34:7f:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=20a582ef-1852-4ca8-a2a2-7a5fddd9121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:18:bb:11:f4:fa:87:65:d2:35:b0:1b:48:
e1:04:63:b9:b3:51:71:17:9f:60:69:47:09:3d:6b:
e8:13:c9:2a:0d:76:92:07:5c:1e:3d:77:43:1e:b9:
58:4d:96:e8:49:3c:a9:db:e4:36:0c:8d:4f:78:92:
76:e2:88:df:ed:b2:99:81:ed:30:49:ea:17:af:4a:
bc:61:47:9c:73:97:10:71:5f:12:b9:3a:c6:22:de:
a1:90:14:72:89:5b:73:9b:24:d8:55:68:12:13:0f:
08:67:1e:c4:ed:46:55:bd:bd:1c:31:f0:cb:1b:45:
98:00:7d:b1:e5:0c:d7:77:25:35:05:86:be:01:a1:
43:c9:24:a9:d2:a6:d6:1d:17:c1:dd:31:f3:b0:73:
92:b0:90:61:ec:b2:ca:2f:56:d6:6d:9c:da:45:45:
04:e4:8e:60:ca:18:e6:a3:db:88:2a:cb:ce:1f:01:
48:ae:60:ae:1a:2e:d6:12:1e:ff:9c:e0:e4:20:af:
d6:4f:91:e6:85:ff:36:42:37:66:cd:b2:d3:1b:0e:
da:e9:4f:24:49:53:f4:f1:25:d4:f3:c7:ec:a4:75:
b4:b4:de:06:2f:83:8d:e6:14:fa:32:91:0e:c8:07:
15:98:7d:36:bd:94:fd:3b:1e:66:ed:2e:b6:f0:43:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D8:44:B7:7E:27:A9:B5:DA:0A:C1:20:42:FB:34:C2:36:B3:32:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f31269-a1d9-3a8e-98a7-06e00ed3d9eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:d3:20:63:74:c5:82:74:a3:74:55:b6:3d:22:e7:a0:d4:ce:
4f:21:6c:c4:02:d2:50:0c:5b:0c:ed:4f:c9:80:03:c6:50:06:
3f:8a:4f:1f:65:a9:ce:38:69:0e:d5:6a:d8:8d:8d:41:4f:41:
6b:52:1b:da:e3:38:ce:aa:35:14:09:bb:e8:92:88:51:fc:55:
8d:b5:05:95:8d:32:44:9c:78:7d:bf:dc:91:58:46:e6:d3:62:
e8:0a:ae:fd:da:9d:3d:32:8d:a2:d0:5e:3a:5d:c3:ae:4d:26:
f6:c7:7e:d1:38:e7:7b:44:c7:3b:94:54:94:82:58:c1:e3:16:
92:c4:fd:c4:14:a5:6f:4c:64:22:17:de:c7:61:d6:71:28:3f:
1e:6d:08:9f:f4:70:30:81:49:5f:74:84:cf:39:69:9e:9d:cb:
56:20:dd:0e:d3:c8:f3:57:aa:31:f3:86:2e:fb:3e:8c:7d:a0:
e0:12:7f:1a:e5:76:15:75:f5:13:a2:f5:2f:fb:e5:a7:fe:f3:
aa:3c:fb:23:fe:86:e9:3a:fa:0b:c2:ba:3b:be:26:b8:f4:e3:
c8:1b:7f:da:7a:57:27:7a:4d:43:35:11:b9:fe:66:75:f7:c6:
d1:76:e9:aa:81:63:68:56:91:ec:b9:1b:34:8a:3a:5d:cc:16:
05:96:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:25 2025 by rpki-client