Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa
File: 1bfb7689-19f6-30b7-b66c-542dc074defc.roa (raw, json)
Hash identifier: 9HpxnnUx6Enh952lNA0v7djwYLTVxJqnvAFV3gc3GGc=
Subject key identifier: 7E:93:98:C4:83:89:F1:CF:A0:51:D8:A3:95:11:0E:38:84:63:F9:9D
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F432858494303EA5A3953F6EF5990CCA0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 16509
IP address blocks: 2605:4300:2c14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:ea:5a:39:53:f6:ef:59:90:cc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=9e550fc0-ccec-4281-8074-fc4476d6a4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:ec:bb:0d:4a:8c:97:63:c4:c8:a3:2b:1b:
5e:cc:15:36:91:69:3b:03:ae:02:b1:5a:58:a0:a0:
e3:b7:5e:fa:22:e4:29:68:d8:f0:ce:6a:40:92:7f:
27:35:2f:13:ab:0d:f5:58:e2:8d:97:0b:13:07:d9:
ef:18:d0:92:31:99:6f:d6:eb:54:b3:ba:74:73:48:
52:d8:41:ca:6c:a9:6d:9c:2b:75:76:00:09:8b:ee:
2c:43:5c:66:a0:0d:dd:29:f2:69:43:e0:0b:2b:75:
be:ec:b5:9b:27:b1:cf:e3:55:1c:c0:31:ab:eb:8e:
d3:a9:c3:ce:38:58:80:09:25:2a:8f:12:66:3d:12:
44:0b:18:6b:c2:19:2c:cb:73:79:79:2e:bb:a2:b2:
f9:22:70:cf:4b:e2:3d:85:ba:1b:45:3c:34:26:47:
7b:ad:97:00:3c:46:4e:46:3c:9e:60:55:c6:21:d7:
2a:7b:1a:52:17:2f:f1:d3:4b:fb:6f:76:b4:1a:e4:
0c:9f:5f:3c:76:6e:ef:21:26:06:78:f6:e4:77:da:
1e:76:5a:f9:bc:a7:b5:c1:5e:44:41:4e:0d:b8:fc:
b3:1e:23:22:d4:96:1e:9e:1c:a3:11:a0:08:4c:ad:
ed:1d:d1:f0:63:fc:66:c0:88:c4:8f:a3:73:42:e2:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:93:98:C4:83:89:F1:CF:A0:51:D8:A3:95:11:0E:38:84:63:F9:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4300:2c14::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:48:62:bd:8d:cf:d7:8d:5c:ca:da:a9:d3:90:1d:e2:52:0c:
4e:9b:61:3e:09:e7:0d:9c:45:ac:02:03:c4:a3:81:1f:f0:a7:
72:fb:9c:1c:b1:a9:c5:de:cf:c6:72:58:97:56:f4:61:e6:5f:
d2:75:56:3d:7a:1d:43:25:f1:bf:24:38:9c:10:d2:da:01:b5:
88:b5:26:85:34:3e:56:ca:32:09:10:bb:44:c0:65:7c:65:c6:
5a:47:86:81:fb:b0:ba:16:1a:bc:c6:bd:c1:e5:fe:86:44:a6:
7e:e5:b3:98:7a:bf:4b:1a:45:28:c5:06:8f:13:88:54:92:a2:
9a:69:0e:b9:6e:23:19:7a:03:2d:28:ac:e0:18:26:03:e5:24:
bd:5b:d4:06:52:6c:f3:2a:75:1a:3e:db:0c:ec:ec:14:96:90:
0d:16:ba:47:56:30:8a:17:a1:e1:6a:59:8a:c5:ef:dd:2c:aa:
cd:c3:f8:31:56:ce:dc:8f:ed:76:64:6f:26:6d:88:81:3d:04:
14:ae:cf:70:4c:c7:e8:f3:8b:e7:70:c9:c6:29:b7:ac:1f:a3:
d8:0a:18:b0:10:a7:b2:dd:a5:ec:b9:5b:b7:6b:c3:22:a1:b9:
9b:45:9e:ac:e8:03:95:80:e1:01:84:cc:2a:6f:06:dc:86:f5:
f9:02:de:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:24 2025 by rpki-client