Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa
File: 379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa (raw, json)
Hash identifier: BS+6A+EqZFmH4KGoeKpGaYuc85H0d5um44Plq+2r1u0=
Subject key identifier: 23:DC:1B:73:C1:6E:B1:9C:32:81:F5:45:AF:52:4A:7C:50:D6:D4:AD
Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial: 010D0C9F43285848EC746D101F2D95DAB643C780
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa
Signing time: Tue 18 Feb 2025 12:52:15 +0000
ROA not before: Tue 18 Feb 2025 12:52:15 +0000
ROA not after: Mon 19 May 2025 11:52:15 +0000
asID: 16509
IP address blocks: 2604:ba80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:74:6d:10:1f:2d:95:da:b6:43:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Validity
Not Before: Feb 18 12:52:15 2025 GMT
Not After : May 19 11:52:15 2025 GMT
Subject: CN=c91e5a48-6c2b-4871-8223-522b12aff21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:61:d3:64:c1:d7:5f:bb:65:8c:86:39:e5:
4f:c3:6c:03:43:dd:aa:bf:8e:49:80:0e:dd:31:2d:
60:d6:5e:3e:ec:61:c5:1b:29:02:97:f0:d8:5d:e5:
80:b5:c5:6b:71:36:68:b0:58:52:37:2a:c0:09:be:
d7:e8:6a:53:07:ce:0e:fa:b7:5b:8f:66:8d:29:fe:
af:48:4b:c6:67:f5:00:d2:fb:be:8b:d4:81:fb:e7:
96:f4:01:1b:be:87:1b:49:6e:be:b7:b7:2d:99:02:
40:56:2d:44:14:a5:1a:34:68:8b:3b:32:63:f0:e6:
65:0c:d0:dc:56:df:7a:7b:51:51:27:39:a2:5b:51:
75:e4:39:b2:a1:36:10:ca:46:17:6f:29:71:eb:46:
a2:e4:69:8a:f1:2c:56:c9:c3:20:4e:ba:c2:1e:2b:
92:c3:2c:3f:cb:cf:ff:cb:49:ac:b8:d1:93:bb:3d:
48:a2:32:9b:8b:d3:b8:c4:3b:05:0c:a3:bf:7a:2b:
b8:2d:37:b5:3e:1e:a7:61:4f:23:e7:7d:b6:0d:03:
fc:94:57:b2:e6:eb:9f:7e:f8:b6:d5:8d:d8:9b:27:
92:32:78:bc:01:81:7a:d6:de:c3:41:8e:f6:1b:7a:
f6:0d:33:a2:a3:c2:bf:53:b3:75:dc:4d:8f:33:9e:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DC:1B:73:C1:6E:B1:9C:32:81:F5:45:AF:52:4A:7C:50:D6:D4:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
X509v3 Authority Key Identifier:
keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:ba80::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:48:1d:89:a2:12:b5:12:3c:d3:7f:27:ea:65:ed:97:7e:45:
c4:73:8b:f5:07:ac:81:de:cb:bf:c2:39:13:c0:d3:0d:d8:1a:
24:ef:70:15:15:8c:94:d5:62:84:1c:ee:6d:11:bb:5b:c3:41:
40:94:c1:dc:a1:32:cd:f0:e4:3b:06:45:55:fa:e5:6a:77:c5:
47:90:b7:ea:a4:be:21:9a:58:c6:39:2b:46:c9:d6:27:87:3a:
5d:10:33:84:17:21:63:7d:a8:5c:e7:ff:7f:8d:f4:81:7c:11:
b9:7a:2c:c0:24:f3:be:82:9b:ad:5b:0a:ac:6e:92:3f:39:f7:
35:8f:27:df:68:98:68:2d:ab:0f:34:aa:8f:6e:22:1c:ae:72:
9f:b5:06:af:ed:ad:23:53:39:e0:5b:bc:37:27:14:21:35:7b:
28:ed:33:dd:66:3f:cb:b1:46:56:43:7e:b8:77:66:bb:86:ba:
49:a2:00:80:ca:24:22:2f:c6:b2:08:a9:7e:73:91:66:11:78:
62:4d:9a:88:22:fe:67:b1:ac:0d:dd:c7:16:c6:07:e7:7c:5a:
47:b0:66:fc:fa:b5:83:e8:7b:23:bd:e1:72:d1:4e:fc:94:dd:
6d:50:57:f1:b7:13:d8:1e:d6:13:41:75:d8:36:fd:ac:12:c9:
cc:58:a6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:32 2025 by rpki-client