Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/690d12c6-0a48-3dcb-aedf-82f4fae1fd45.roa
File: 690d12c6-0a48-3dcb-aedf-82f4fae1fd45.roa (raw, json)
Hash identifier: bBzzTYqr620THhz+JKHTdhox3hM+JjR/L0iiJDj05DY=
Subject key identifier: F4:70:10:20:E5:D3:28:7F:0B:6E:CE:88:6D:0E:4E:E7:22:09:26:80
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848FA8BE893B373CEEE62E7A480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/690d12c6-0a48-3dcb-aedf-82f4fae1fd45.roa
Signing time: Sun 23 Feb 2025 14:00:51 +0000
ROA not before: Sun 23 Feb 2025 14:00:51 +0000
ROA not after: Sat 24 May 2025 13:00:51 +0000
asID: 46979
IP address blocks: 2001:470:3da::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fa:8b:e8:93:b3:73:ce:ee:62:e7:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 14:00:51 2025 GMT
Not After : May 24 13:00:51 2025 GMT
Subject: CN=b7c6c706-f651-42b6-9840-58dd014f5196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:e8:29:f6:0a:76:74:30:3d:15:cd:db:54:
6d:ca:58:77:17:d3:ea:30:01:77:2d:89:30:a0:e8:
0d:08:bd:69:75:cc:b5:9a:45:72:d7:2b:07:eb:b3:
27:f6:8b:da:1b:35:17:33:d0:8e:10:bc:b0:1f:6c:
ab:d3:fd:f7:3b:68:11:d0:b1:60:a0:21:59:22:d1:
a1:e7:32:a9:4d:3c:3e:9f:0b:82:a9:9d:78:38:93:
9c:fe:62:4b:8f:9b:a0:b5:7a:ea:2e:95:90:dc:7d:
40:3f:70:d5:a4:74:45:fd:72:ba:bf:14:c2:0d:b7:
5a:90:e0:2f:13:a1:9f:80:70:0b:40:98:30:50:c8:
9b:ab:3e:76:45:6d:32:e5:b4:5a:86:0a:07:ce:46:
fd:ea:28:3b:a5:04:6f:a3:56:ec:c2:a8:d1:2f:f1:
1c:50:62:18:63:fa:7f:5f:d9:4b:0b:9e:10:b9:1b:
96:04:dd:14:0b:ae:11:43:08:e6:fe:4e:d0:32:77:
17:40:b7:2e:cc:4d:78:75:c5:0c:e8:19:93:e7:ce:
f3:8c:ae:e0:ff:35:17:02:15:54:5d:84:3a:e2:c8:
8e:21:c2:01:7d:0c:f2:89:2e:40:5d:da:99:8c:5f:
4e:c9:48:b4:87:86:80:5a:9a:b7:18:ec:95:fe:35:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:10:20:E5:D3:28:7F:0B:6E:CE:88:6D:0E:4E:E7:22:09:26:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/690d12c6-0a48-3dcb-aedf-82f4fae1fd45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3da::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:68:a1:4f:d3:d1:b9:d6:c5:59:b7:c1:57:b1:c8:36:36:cf:
0a:9c:76:c7:0f:d2:33:83:99:fd:48:1a:be:c7:6f:c2:e6:fb:
e2:93:d8:b4:ab:0c:ed:4e:1d:c1:d6:2b:ed:f6:69:18:bc:dc:
52:0e:9d:42:9b:a4:7e:fb:22:b4:e2:ff:ca:01:1b:e2:a3:ac:
bd:58:de:09:68:be:ae:84:20:3d:73:d7:92:86:17:b8:8a:b8:
af:bf:fa:27:e5:cd:7b:c3:21:a2:68:8c:2e:56:0e:41:67:66:
20:57:e7:92:db:c1:66:c6:76:55:f6:47:ee:8c:9c:86:ed:77:
24:40:32:08:15:52:1e:94:b5:38:ca:fa:e1:cd:30:b0:8f:d8:
e6:9f:9a:41:4e:87:38:b8:d1:2c:13:4c:47:36:c9:cd:ab:fe:
b9:25:94:87:0a:03:4d:cb:b4:87:29:7c:f2:cd:62:dc:39:b8:
40:48:fd:83:07:fc:24:3d:d2:c4:17:18:6e:da:27:28:d0:5d:
b7:c9:89:b2:bd:29:d8:12:28:97:1e:22:76:ca:1e:cd:24:47:
d4:52:b7:6d:f4:93:a3:f3:c3:58:26:8b:82:64:f7:2a:92:ad:
0b:a1:5c:14:80:07:1e:1e:2e:4d:e5:f6:21:ec:70:cd:31:5a:
b6:94:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:25 2025 by rpki-client on console.sobornost.net