Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/cad164c4-9edc-3cf6-98a3-82da100cb98b.roa
File: cad164c4-9edc-3cf6-98a3-82da100cb98b.roa (raw, json)
Hash identifier: OpXYBJlm9F/BIkN/6hkeINnIXvkKqd6/Vm2Ph0pi9o4=
Subject key identifier: FF:0E:D3:4D:F9:3D:58:7C:5F:2B:0E:F9:39:19:02:63:FF:EB:27:66
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F432858489E6B6E399E87E892F01AA8B0
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/cad164c4-9edc-3cf6-98a3-82da100cb98b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 2620:98:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6e:39:9e:87:e8:92:f0:1a:a8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=e7be0f7b-4ffb-4bef-be01-034d5b422cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:62:5f:01:4e:cb:fe:3e:23:91:7b:1e:92:
24:91:44:dc:d6:2c:7e:76:42:da:9b:0e:5e:a9:01:
b4:4b:d9:7c:d5:16:ac:13:94:53:0e:81:76:14:1d:
38:2f:63:cb:4a:0c:9b:ff:51:b1:55:c6:70:0c:6a:
57:b3:ea:fa:2a:13:76:49:e3:0e:50:01:db:85:56:
4d:7e:ec:f1:df:9a:e8:62:16:95:ed:23:8b:b4:f5:
57:52:19:6a:45:7b:44:d5:ce:39:6c:f0:30:ac:88:
ed:88:20:90:69:05:08:66:62:2a:b3:fb:51:ec:3b:
12:40:a6:43:2b:d9:bf:31:dd:f9:df:16:bf:6d:82:
61:33:9c:fc:35:9a:d3:7e:95:7e:48:76:2e:cd:bf:
34:39:c2:61:37:89:be:5b:cd:eb:7b:30:8d:78:02:
81:72:b8:33:17:40:bb:b6:6f:f2:a4:0c:7d:10:e7:
76:64:7a:21:b9:9e:e6:24:66:b4:2c:b7:55:a2:63:
2d:77:6d:e1:2c:ca:4c:cb:c5:4c:76:43:74:7f:29:
e4:5a:cb:1c:a4:02:e4:85:9b:38:1c:97:c1:85:d4:
e3:3b:b3:00:7c:be:f2:e1:e8:8f:90:cd:b8:54:8d:
4b:cc:ee:36:88:ca:04:bf:55:98:7e:03:2f:07:43:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0E:D3:4D:F9:3D:58:7C:5F:2B:0E:F9:39:19:02:63:FF:EB:27:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/cad164c4-9edc-3cf6-98a3-82da100cb98b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:98:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:2a:31:d4:bd:bf:bb:cc:48:fb:d1:21:38:45:b3:cc:ee:44:
7e:f1:0d:54:c9:bb:71:77:aa:2c:08:ce:cc:75:e0:a3:92:86:
bf:91:8f:0d:17:05:27:cf:cd:ea:b6:fc:ca:70:60:e2:e1:3e:
31:fe:f8:35:99:f1:5d:10:12:bf:9e:e5:c5:24:5e:f4:ab:94:
fe:3a:ab:f5:6b:8f:e9:b7:3a:64:73:8d:0a:18:a0:31:88:8d:
b8:22:a6:89:7e:b6:da:b0:59:19:79:9a:19:41:df:16:86:83:
f8:40:9d:e3:a1:15:f8:c6:ef:27:09:2e:1f:38:7c:7e:6f:a2:
72:08:00:49:67:72:16:98:8b:a0:4b:e2:67:3e:0c:bb:70:2f:
fa:e2:f4:86:24:7b:59:67:0c:ff:ac:6e:f8:b1:bf:91:a7:99:
43:33:54:5d:35:50:71:37:59:5a:8b:b5:3a:2a:d5:3b:2a:05:
1a:0f:0b:29:a6:c1:03:90:b3:b3:f9:eb:21:21:80:cf:e8:6d:
b2:37:f0:3a:cb:8f:1a:c2:3f:36:0c:5a:8d:ea:20:8a:29:ef:
ef:77:a9:21:b5:02:c6:c0:b1:4d:89:27:34:8d:9e:52:1b:4f:
a5:5e:5f:a4:e6:90:52:2d:e3:cf:0d:14:0b:5d:03:c6:ef:29:
ae:2e:75:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:57 2025 by rpki-client