Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da5d775c-e5be-3fb0-9c53-2fca5b4a63df.roa
File: da5d775c-e5be-3fb0-9c53-2fca5b4a63df.roa (raw, json)
Hash identifier: xQ1ZOVI2YcKaBJWFVEpw81bEUeYtVsQ7Mxn8gkptjvM=
Subject key identifier: 36:7E:24:9A:8C:D1:53:F4:2B:5C:36:A2:88:B4:FD:E6:33:65:4B:2A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E9481833144A4ADE6200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da5d775c-e5be-3fb0-9c53-2fca5b4a63df.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 47485
IP address blocks: 2001:470:30c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e9:48:18:33:14:4a:4a:de:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=ae8aa5c0-88f8-4e7e-8ee7-d8bbc54d927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:da:6b:65:4a:b4:29:dc:71:d1:16:ca:6c:
e1:0e:c7:f2:9e:21:15:52:f3:9e:e5:f2:ce:a1:6a:
d6:d6:17:3f:3e:36:27:f6:15:6a:04:a2:fd:04:d2:
da:4e:58:92:29:55:17:5a:80:66:31:20:30:b7:51:
78:0a:5a:f7:2b:ee:a3:d0:47:a6:ae:53:23:f8:96:
d8:80:f6:a8:ee:12:d2:4a:df:3b:04:b8:be:41:d1:
ed:9e:57:c1:53:e5:74:ac:02:4e:87:b1:ac:93:e5:
e5:55:45:53:48:5a:5c:07:42:bf:51:59:3b:35:c0:
23:29:b9:b1:f1:81:08:11:67:62:19:ea:68:8e:18:
c2:d4:5d:43:76:2d:f4:a2:f1:14:7b:95:5d:93:04:
93:3c:51:3e:75:39:8e:6a:fb:fa:f9:f4:83:e7:e0:
25:4f:de:20:db:db:c7:f7:a0:ec:4b:0e:81:05:c6:
c1:86:a4:d7:a0:79:de:52:2a:f5:6f:bd:17:44:b6:
2d:0d:78:56:e2:fd:07:73:8c:01:95:27:6b:f1:41:
b4:be:3c:9c:08:e4:85:e9:cc:7f:2f:b1:f0:0a:6b:
5d:04:6d:9a:02:8d:ac:1a:a7:d2:cb:5b:78:0d:87:
b0:d8:8d:2d:5b:a8:f7:59:20:13:c8:8d:f8:a3:ea:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7E:24:9A:8C:D1:53:F4:2B:5C:36:A2:88:B4:FD:E6:33:65:4B:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da5d775c-e5be-3fb0-9c53-2fca5b4a63df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:30c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:e0:0b:55:c8:c7:58:a4:df:d4:57:39:2b:91:8b:d3:41:51:
e5:69:a2:19:0c:37:72:a9:10:49:91:3a:94:08:a6:fa:ee:74:
81:c4:49:de:00:8e:29:65:f3:6d:d8:a4:30:30:68:09:5c:88:
8b:0c:b3:b3:8d:3b:13:8c:13:a6:b8:5c:5e:ac:7f:31:9e:ee:
d9:f4:31:9f:3b:10:1c:e0:68:ef:92:b5:6a:60:79:b4:12:b1:
5e:56:d8:87:70:a2:35:e9:b5:df:ff:f0:10:c1:35:27:45:b1:
d9:ab:04:3d:2f:63:aa:62:eb:be:ab:9d:a0:a5:55:1b:49:f9:
fd:07:7c:dd:9f:0b:01:33:3a:13:41:2b:3e:03:bb:fb:71:c2:
fb:7b:74:6f:4c:d8:30:36:4d:49:d3:9b:d4:6c:7e:b7:e2:fd:
49:39:93:0e:16:18:4b:c3:54:e0:1f:60:65:01:9b:1e:b7:56:
21:9e:4f:9d:d6:e2:2d:ae:d2:0c:0f:ff:71:de:43:b6:96:27:
08:dc:98:b5:5d:03:ee:90:74:79:15:d1:45:ea:19:2b:49:aa:
5f:1e:f9:38:64:2a:a9:a9:2e:d8:74:f5:7a:4c:b1:3b:de:49:
c4:e6:cc:60:1a:66:88:cb:2a:11:e3:f0:73:a0:90:fe:ba:5f:
bc:03:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:09 2025 by rpki-client