Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa
File: f09e69da-b086-3a26-b789-5a8b5ddee439.roa (raw, json)
Hash identifier: Pqa4zzLQMvwYNMylGKvLQgCPBqSwxypY/1bVdEoaStI=
Subject key identifier: A9:8E:8C:4E:2E:69:DD:0A:73:AE:17:0F:06:28:46:DD:0D:C6:67:34
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490E16CE679AD1350CD731EC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 7342
IP address blocks: 2001:502:be98::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:ce:67:9a:d1:35:0c:d7:31:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=7ee1383b-7d5a-4ea0-acbb-75df9b40e62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:6a:8d:29:ad:7e:72:b0:65:a3:5d:d5:5e:
ce:d5:77:4b:c0:b4:34:26:01:20:58:44:c1:4c:c6:
18:97:b7:99:48:4d:ff:c6:d9:f9:f2:f0:c3:26:77:
01:3e:61:eb:f3:f2:c5:bb:80:3c:db:b4:a2:f9:d8:
ba:9b:b2:6d:99:00:e7:3b:f4:09:a3:03:8f:ce:69:
ae:91:43:81:2b:2f:5a:cd:9a:23:84:1a:fe:98:dc:
c8:9d:5b:e5:c7:42:56:33:aa:5d:29:9e:af:99:e8:
4a:67:a7:1a:9e:25:5e:4a:eb:e7:ab:b2:5b:67:88:
b0:2a:49:ad:1d:9a:a0:18:77:3e:26:49:cd:95:02:
ce:fb:fb:3b:33:36:0f:78:79:94:21:6f:cc:54:bf:
83:1a:35:04:85:57:30:8b:a1:78:4d:cb:b8:56:aa:
8a:a3:85:e9:8e:68:52:3e:e2:e3:72:e1:e0:62:9a:
e2:8d:40:bc:b3:b6:6b:b7:a4:42:fb:c7:5f:9c:8f:
21:33:74:ec:f8:91:b0:55:31:49:37:7a:8e:55:13:
05:0c:42:77:04:0f:74:f4:65:9d:7f:9c:f1:d7:c7:
b8:b6:a6:55:52:56:92:b2:6d:73:a6:5e:53:d2:26:
69:55:f9:9e:ad:1e:2c:3f:9a:f1:c4:c3:d6:05:ea:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:8C:4E:2E:69:DD:0A:73:AE:17:0F:06:28:46:DD:0D:C6:67:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:be98::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:6f:4f:c0:ae:71:55:f2:8c:38:8f:0b:fa:ec:f9:56:0b:42:
31:ca:91:49:f0:9c:86:4a:2b:e4:35:ae:7c:e3:e5:a8:77:ab:
0f:fc:c8:95:5c:ba:d9:38:1e:28:e7:5c:4c:69:5d:c5:cb:de:
59:c9:d1:f9:c0:4f:fa:a8:26:ca:57:22:11:5d:07:e4:06:48:
c2:7c:34:81:5a:b8:60:7b:4d:01:11:22:5a:8c:d4:11:08:fb:
b6:33:e3:68:60:60:36:6b:f3:41:eb:ff:5d:b5:d0:46:58:c6:
d0:10:4d:87:70:8a:71:fd:11:a0:89:90:43:c4:33:4e:04:1a:
d8:b6:73:1c:28:c6:43:e5:0b:8a:65:54:df:64:72:76:3f:f1:
3c:42:48:2b:15:4a:e7:37:e8:53:4e:0a:dd:4f:6c:98:a6:49:
8b:e7:f8:62:ca:f2:f1:2e:c9:d6:9e:1a:29:47:5e:fe:cf:05:
1e:0e:a5:64:32:e5:04:69:5d:e2:01:0e:eb:bc:b1:d6:1b:d1:
03:05:69:d5:1c:ba:df:22:17:48:19:1f:1d:fd:5d:ff:da:a2:
c9:1d:eb:d6:70:57:ff:24:1a:3e:43:44:04:25:59:b3:fb:4a:
93:ed:bf:35:89:ee:bf:cf:74:d6:dc:e4:8f:7c:02:e4:8b:89:
16:c6:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:13 2025 by rpki-client