Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
File: 5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa (raw, json)
Hash identifier: ZSggx/rUyiIF4wSoLFglaNmm4Me3uqGo7mHjyJS3eJA=
Subject key identifier: A7:98:8D:97:6D:C9:B0:48:F3:A9:8F:F7:7F:56:FB:42:36:D5:BE:F5
Certificate issuer: /CN=22ce2863-e26f-47ca-8b36-16048be7f337
Certificate serial: 010D0C9F432858491D715B452CAEC529BC1E9280
Authority key identifier: 26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 398931
IP address blocks: 2620:af:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:5b:45:2c:ae:c5:29:bc:1e:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ce2863-e26f-47ca-8b36-16048be7f337
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=ec8ca5c5-3fdc-4957-a9da-a335145d0b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:62:a1:ef:a3:9a:d8:a7:9c:8a:7a:07:dd:
e7:db:b9:df:83:5f:23:98:54:e5:9b:19:d0:68:cf:
12:3c:5d:0f:6e:df:f2:18:eb:70:36:b1:c5:17:be:
21:7d:a9:8d:8a:82:17:22:a2:dc:85:c0:55:8b:f3:
06:96:fa:40:0e:68:70:da:78:31:73:fe:82:8b:08:
fd:0f:10:38:54:58:86:d1:29:6c:d3:cc:b6:c2:a4:
68:49:22:ec:4b:63:cc:73:e2:4f:6d:06:1f:55:33:
55:02:10:d3:71:0c:69:00:8f:39:ed:9c:08:06:80:
86:db:0d:f6:49:6a:bb:df:43:e2:74:01:a2:03:85:
18:91:16:22:47:60:58:58:6c:5a:92:8c:cf:1b:30:
50:2b:02:b5:71:79:8f:0c:6a:49:6d:0d:4c:9d:a8:
3e:13:f7:7a:60:7c:8a:e8:d1:ed:80:f2:d3:f9:68:
25:b9:56:00:4c:3f:c5:4b:cd:17:c0:93:f0:8b:5c:
ee:a4:a9:e7:72:47:91:18:3a:9f:84:26:95:a1:15:
83:ae:68:c1:37:77:b2:87:df:25:fd:31:ac:04:bf:
81:e8:2c:20:19:f5:d3:d9:89:a9:57:e6:c5:d8:c3:
f1:e9:89:d6:dd:35:48:fc:87:e8:47:bd:50:c1:8d:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:98:8D:97:6D:C9:B0:48:F3:A9:8F:F7:7F:56:FB:42:36:D5:BE:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl
X509v3 Authority Key Identifier:
keyid:26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:af:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:09:fc:55:55:52:49:73:7a:1c:8c:67:7a:98:7f:48:c3:03:
c8:dc:cd:94:17:35:95:a8:b3:6e:ec:8f:e5:10:69:13:7b:3c:
bb:39:fc:b1:1a:30:1a:fd:84:b8:97:b0:36:f7:38:bf:9d:fd:
d1:3c:a2:a1:aa:73:cc:b0:e7:3a:01:90:23:e4:5c:bc:f2:d1:
92:f0:0c:99:82:1a:33:c7:0d:2c:45:91:95:31:7a:bc:4a:d1:
56:92:82:2f:91:3a:f0:3b:4c:ab:83:f9:39:2d:4b:b5:40:f3:
c8:af:cf:58:a4:0c:cd:e7:ca:52:2d:b6:bb:88:a8:a4:e7:25:
e1:63:f4:01:95:52:aa:ef:6c:f4:08:db:aa:a7:7c:83:ad:9d:
ce:fa:98:c5:0f:5b:ef:14:76:62:19:b8:1f:ea:1a:fa:55:d4:
40:aa:23:10:a0:df:d3:f5:92:b1:50:71:ea:b6:51:04:cb:ec:
56:f6:d0:01:6f:fa:67:63:9d:96:ff:6a:56:0d:e6:55:77:fe:
6a:85:a3:1a:03:ca:28:e3:48:94:69:0b:c7:58:cf:09:2c:f4:
aa:7e:48:37:1c:3e:d5:9c:69:0d:fc:cb:d3:cb:9d:54:bd:ef:
c8:9d:04:9e:60:77:6d:2f:05:33:76:f4:72:3e:5b:1d:9b:d1:
2b:45:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:03 2025 by rpki-client