Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
File: 13d3d209-306d-30fb-b006-0cf3524201ad.roa (raw, json)
Hash identifier: I9apIFAGVX5ZkAOPfgqjfgbAYO3b4sPi7nYvSyqYlIk=
Subject key identifier: C8:16:01:2A:05:48:FD:58:B3:D5:73:26:5E:E2:15:5B:67:87:3F:38
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285849350EABA417D662D93186F900
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2606:7bc0:1090::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ab:a4:17:d6:62:d9:31:86:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=bbeb641f-9e53-4cb9-a146-e006d17509ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:54:51:dd:18:c9:0c:e8:ec:46:22:fc:97:
5a:1b:62:a7:31:69:4f:ea:3b:16:47:39:46:01:a3:
50:1d:41:b3:12:ab:fd:ce:d2:d6:7c:42:72:ec:0f:
7c:e7:73:f6:28:bd:43:50:50:b8:15:cc:b8:6d:a2:
64:78:81:fb:5a:28:fd:e7:7f:d0:01:95:4d:6e:cd:
3a:4c:db:1c:78:3a:dc:69:10:41:0f:ad:e0:d4:05:
6e:07:f0:c6:71:e7:6a:ac:2a:a6:b1:83:4c:cd:b6:
0e:de:96:0e:c7:3a:66:ea:bb:59:a8:95:cd:8f:83:
86:52:cb:f1:08:cb:4c:5c:19:28:6f:be:2d:9f:b0:
93:a1:f4:ba:06:c0:6e:fc:76:ca:29:de:08:30:0c:
8d:d6:42:85:d4:9a:63:2d:27:75:2b:36:31:a8:b8:
17:ff:e5:04:bd:29:93:d3:fd:6b:a4:69:4b:2b:70:
a5:d0:fc:ff:8b:e8:21:c8:0c:0e:ca:a0:97:b4:d8:
f9:75:21:bc:be:5e:00:ea:74:95:78:64:38:46:22:
5d:2d:14:dd:00:1b:88:61:f6:03:20:44:fe:f4:9f:
89:a9:f9:72:90:fc:d7:b7:c3:70:0a:72:33:b9:49:
aa:bd:5f:c1:82:19:a5:7e:72:fe:00:03:6b:9e:9a:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:01:2A:05:48:FD:58:B3:D5:73:26:5E:E2:15:5B:67:87:3F:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1090::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:42:8c:dc:94:81:fb:9e:dc:a1:3c:a2:69:66:75:7d:10:20:
ad:ed:88:11:52:19:65:12:f5:dc:62:ca:8f:5f:d8:c0:cd:e3:
eb:a9:30:b0:ca:75:2c:bb:0b:ca:e8:fe:08:5c:0c:82:32:da:
0e:b8:10:5e:0b:e9:b8:1a:51:b8:3f:ff:4c:31:5d:d0:ae:d4:
a3:ac:ce:55:61:74:23:8f:0c:e2:27:b3:23:bc:fa:60:e2:8d:
6b:b3:f6:1e:ee:32:c4:03:2e:64:19:b4:19:32:cf:e6:8a:44:
14:81:5a:74:c1:99:b5:36:ab:1a:43:0d:46:3a:b8:9f:11:4e:
25:e6:95:ef:27:ac:86:6e:ed:bc:f9:26:90:c2:f8:8e:4f:2a:
2c:7d:1f:33:66:71:2f:b1:40:4a:02:7c:81:68:a9:1d:ea:a8:
1b:00:3d:2a:75:31:04:54:01:9f:1a:ff:a1:cf:ee:90:1f:f1:
37:b8:e5:dd:e9:9f:12:4a:56:4c:d1:e8:dd:cc:e0:29:e9:01:
77:61:28:22:2e:6c:86:85:8c:3a:36:23:fa:d4:1a:dc:07:96:
a6:24:fd:d5:b1:e7:3b:fe:03:f5:7f:54:61:c2:43:f6:fe:53:
ac:c2:9e:26:83:f2:9e:90:02:fa:23:8a:3e:c1:d0:3c:26:12:
87:96:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:02 2025 by rpki-client