Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/99907f57-fe78-3861-8a63-644979c1d80c.roa
File: 99907f57-fe78-3861-8a63-644979c1d80c.roa (raw, json)
Hash identifier: KymYkrtE37ul7bqeSM6MvbuOYoNkYkS0at6Hub4Rzfw=
Subject key identifier: A9:BF:54:96:7A:28:9A:19:5E:CC:3F:D1:26:7C:6D:1E:F7:9C:99:9D
Certificate issuer: /CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
Certificate serial: 010D0C9F43285848AC60D4A05F030C2744BC7900
Authority key identifier: E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/99907f57-fe78-3861-8a63-644979c1d80c.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2620:c6:6000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d4:a0:5f:03:0c:27:44:bc:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=1788765e-823b-4cc1-93ea-b326eebd1185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:1f:31:b7:4c:6f:f7:f2:da:26:e8:b8:43:
bc:31:01:ce:dd:49:fd:ec:66:57:88:62:7d:81:d1:
0d:49:a2:a2:76:3a:00:f8:29:ea:f5:ba:6c:7d:8e:
67:a4:78:ed:b0:a4:b7:35:f4:17:63:a1:4f:7a:27:
99:32:ed:08:b4:36:c6:d3:5c:42:45:48:a4:05:24:
a4:c8:44:f4:8a:7a:ce:05:21:db:66:5f:ca:03:5f:
d3:a9:58:c5:5d:ee:9d:92:89:12:67:fa:d5:75:55:
c9:2a:05:d7:d1:12:b7:6b:68:6a:ec:fe:33:ca:46:
87:c5:29:b7:85:35:b0:f4:94:46:fe:23:b5:26:ee:
2e:eb:35:85:45:5f:cb:68:48:45:81:cc:e4:a7:2f:
5e:c5:a0:ef:ad:fb:8d:e8:eb:3b:26:fc:69:09:ba:
e3:a8:ae:3a:91:eb:5f:1f:d6:97:97:1f:03:c5:c1:
ad:6d:2e:3b:18:25:bf:80:9e:ed:74:ed:61:2a:b6:
1a:1d:3f:ee:5c:7d:9c:8a:44:8e:23:f1:74:5f:64:
9b:a9:b8:02:1c:8e:c4:b1:eb:7b:60:f8:bf:96:f4:
1d:c7:b9:86:3e:a1:1d:da:d3:bc:a4:d2:57:f4:c4:
d8:df:9b:f9:7f:94:a6:6e:be:af:76:86:eb:21:d3:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BF:54:96:7A:28:9A:19:5E:CC:3F:D1:26:7C:6D:1E:F7:9C:99:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/99907f57-fe78-3861-8a63-644979c1d80c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl
X509v3 Authority Key Identifier:
keyid:E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:c6:6000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:62:a0:0a:0a:58:ab:6a:b0:e9:92:d3:6c:53:4e:8a:18:06:
ec:7d:69:88:f9:0d:7c:13:3a:c9:de:56:10:11:9c:34:cd:b7:
5f:2d:23:d0:e5:40:b5:17:05:d2:6b:6a:f9:dc:f7:a6:64:4f:
a9:d7:0d:0e:c3:8b:c8:86:d6:83:e1:15:a1:a9:a2:bc:b0:92:
fe:a7:b9:37:9a:93:06:04:2d:91:ac:1f:7e:20:6e:69:20:85:
d7:3c:9b:8b:64:2b:b8:43:e2:94:0b:8a:01:b9:4f:88:96:7c:
e6:88:17:64:11:0b:88:d1:ce:9e:38:a0:74:83:c2:d6:f5:ac:
0f:42:d9:96:58:fd:7c:89:1e:3f:26:dd:ce:55:41:f2:77:1c:
0e:3d:ad:30:79:41:17:3a:2c:df:fa:73:c5:71:7f:82:ff:12:
b3:e7:f0:5f:e5:b5:bc:70:bd:0d:9a:30:b5:ed:6e:a1:db:be:
e3:7a:31:83:35:18:99:2e:3f:21:ee:59:c7:c5:58:2d:89:4e:
a9:33:35:15:2c:f7:51:13:ab:53:87:e1:f2:ee:50:99:84:57:
71:ca:ed:fb:e3:32:91:83:07:74:dc:a8:81:44:a8:15:d6:e0:
6d:da:36:eb:4c:90:d9:8f:dc:48:e9:62:56:5e:f5:91:cf:57:
33:76:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:23 2025 by rpki-client