Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa
File: b9b307c3-dc7b-3371-a0f1-315acde48792.roa (raw, json)
Hash identifier: Fp4yW8knMy3eUkSvXqkvbMyl7r15pXzLxDOcrfQNrNY=
Subject key identifier: FC:08:25:30:7D:1E:16:23:F4:6A:55:77:4F:77:11:2E:4C:FA:02:1C
Certificate issuer: /CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
Certificate serial: 010D0C9F43285849350E9945EE3E8226574EFB00
Authority key identifier: 50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 1351
IP address blocks: 2620:104:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:99:45:ee:3e:82:26:57:4e:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=e57a6811-ea54-4d91-8a4e-73f093c0c9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:eb:1a:63:58:93:92:a0:5c:b1:40:ba:41:
89:b2:75:bc:90:fe:0c:73:c4:d1:46:59:61:e4:12:
d1:39:ed:f2:10:d9:f3:db:53:76:03:17:e5:aa:ba:
21:b0:00:6b:0d:3e:60:eb:9a:05:0f:d2:6c:a3:f8:
9e:36:d1:72:db:04:de:24:77:19:4c:5b:34:21:cb:
25:1f:e4:98:c8:9b:09:80:42:5d:d1:3a:72:b2:36:
9e:1e:9c:b6:7a:97:1f:6c:1c:98:5d:a7:e6:42:ec:
27:24:a7:77:e5:c4:5b:da:97:4f:db:52:d4:5e:2d:
51:d9:fe:c8:1d:ba:63:45:d9:28:25:42:3e:e5:46:
b8:b9:60:2e:df:b2:aa:f8:e6:97:50:56:a6:63:d7:
f2:8d:8c:cf:23:94:82:eb:fa:1b:fa:19:bd:e3:15:
ed:db:19:12:7c:c4:d3:d2:ed:36:4c:99:50:4c:8a:
1a:03:9e:84:84:95:f7:2b:5d:3e:60:1b:75:11:f7:
d4:79:03:ca:f3:d3:be:64:a8:c2:d7:2c:8a:0c:27:
e9:9a:cc:3e:2d:ba:e0:03:e8:a4:df:99:48:a9:f8:
ec:1f:9c:9c:90:73:7f:a0:52:58:c5:6b:c8:45:9c:
b9:d2:83:28:4a:7b:f9:6d:d3:c5:9c:0a:6d:42:f4:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:25:30:7D:1E:16:23:F4:6A:55:77:4F:77:11:2E:4C:FA:02:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl
X509v3 Authority Key Identifier:
keyid:50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:104:e000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:27:96:fb:c7:9f:a9:a8:9f:c9:b5:08:6b:a3:4f:ce:74:25:
37:27:1a:05:f2:f5:1f:5e:90:ee:8e:f2:47:dc:74:5d:e5:54:
72:bc:6e:60:e4:a3:9c:8b:ae:b5:b9:ce:7a:78:2b:fd:bb:62:
7e:5d:e4:5a:5c:6a:3e:d8:fd:3c:5f:1c:2a:b5:a7:a5:3b:4f:
1c:78:de:21:77:ac:18:90:13:e5:67:05:49:f4:6f:a5:28:37:
4a:17:ab:bd:7b:88:b8:87:c2:37:70:3d:f1:3f:48:d5:46:db:
b2:55:19:2e:cc:7b:a4:80:23:11:b9:9c:a3:d9:67:87:12:b4:
f2:8e:ed:d7:a8:3f:63:54:cc:39:00:4f:d6:79:2b:aa:2d:68:
0a:47:e8:e4:c4:3c:e8:02:c2:59:9c:8d:92:bd:a2:61:01:06:
9e:5e:8b:af:46:d7:a4:5c:c4:49:0d:83:c1:b0:9b:4d:0a:2e:
4c:49:2f:7d:5d:9c:0d:71:04:38:68:6b:ab:7e:71:d8:65:42:
74:de:ce:d8:67:24:fa:46:46:91:d9:d1:c4:f4:5c:67:c9:fc:
80:d6:4e:57:01:79:21:60:80:64:47:ca:6b:75:b0:f9:c5:d9:
95:82:4a:d8:7f:65:51:9c:11:3d:7f:41:b8:25:03:30:4c:68:
0e:f9:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:36 2025 by rpki-client