Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f791ccf-fcc1-32c2-941f-d9b54f5689e4.roa
File: 2f791ccf-fcc1-32c2-941f-d9b54f5689e4.roa (raw, json)
Hash identifier: DpU/npoQNhBgegbaauGZIjbv26FMqo+GFH7xTRn1gn0=
Subject key identifier: 4E:82:11:D8:39:BD:54:8D:08:26:94:B8:EC:87:16:4A:7B:C2:5D:2F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213470116F9B0C20E157A0B0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f791ccf-fcc1-32c2-941f-d9b54f5689e4.roa
Signing time: Sun 09 Mar 2025 10:21:09 +0000
ROA not before: Sun 09 Mar 2025 10:21:09 +0000
ROA not after: Sat 07 Jun 2025 10:21:09 +0000
asID: 855
IP address blocks: 2001:4c0:2001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:70:11:6f:9b:0c:20:e1:57:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:09 2025 GMT
Not After : Jun 7 10:21:09 2025 GMT
Subject: CN=c358f233-fb18-4648-a343-39e55fd45e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:33:be:e1:33:9f:d3:85:cf:21:88:97:f3:
c7:bb:b1:54:61:75:13:ee:19:5d:c9:65:f2:c5:56:
4f:d9:2c:ca:85:07:64:15:21:ce:dc:e5:35:20:90:
0d:c0:5b:dd:df:f2:4a:e3:3a:61:42:29:5f:50:9a:
be:88:f8:1f:58:67:7a:5e:ce:1d:92:c9:86:3d:89:
1f:cb:7d:90:8d:18:97:2a:5f:84:56:30:59:0e:63:
03:6a:48:6e:a6:f8:c3:d0:0a:c6:e5:64:ee:54:09:
ad:4a:a2:91:e4:7b:4d:e9:28:28:bd:e0:d1:78:1c:
fc:ed:31:75:5c:5b:a7:4b:38:f6:4a:0b:cd:12:2a:
58:a8:49:fc:b6:82:7f:4d:cb:5c:cf:f2:10:30:df:
68:7e:b6:0c:5f:b1:e9:d7:ad:09:a9:34:28:fa:27:
3e:90:3d:63:0b:bb:9b:99:74:1e:45:9d:21:fa:04:
90:3f:6d:14:ea:6c:a2:ed:1d:3d:92:17:7d:c5:d5:
89:46:bb:c8:7b:7e:54:d7:49:41:a4:50:e6:a3:e9:
30:8a:63:aa:42:71:12:2a:16:b8:fd:9c:c9:90:5b:
5d:12:e7:af:6f:9f:c9:b8:e1:51:2d:89:53:cc:94:
2a:cd:e1:89:2e:0c:58:14:66:59:22:9d:bf:b0:6f:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:82:11:D8:39:BD:54:8D:08:26:94:B8:EC:87:16:4A:7B:C2:5D:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f791ccf-fcc1-32c2-941f-d9b54f5689e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4c0:2001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e2:7b:f0:d4:15:2d:ea:df:8c:49:74:72:f3:86:3d:dc:1d:
a8:58:d4:be:9b:e0:ba:e5:3f:63:27:51:47:c8:c4:15:ad:99:
42:eb:aa:80:98:19:ad:4e:da:f5:5d:3c:db:93:5b:3e:41:12:
7f:ad:3d:b7:6a:33:c9:1a:81:1a:70:84:2d:7a:81:77:09:3a:
fd:77:08:2d:69:e2:25:2c:36:a5:ca:0d:07:1b:18:4c:50:75:
a3:1c:1f:b8:fe:58:f4:f0:f9:2c:8c:bd:93:af:fa:70:08:a2:
44:47:73:23:8c:05:bb:af:8c:ae:28:7e:dd:a8:d3:2f:9f:b9:
88:cd:9c:0d:fd:92:4e:7b:5d:6c:8b:4d:bc:eb:ba:d7:80:25:
a3:6f:0c:74:b2:78:e9:c6:7b:f2:e5:88:c2:12:eb:c3:2a:0d:
22:5b:96:b0:22:8e:9a:dc:1c:93:4b:f7:33:58:73:3a:63:4d:
23:bf:c5:d2:bb:be:83:3f:4b:52:d1:4b:fd:94:31:72:49:a4:
78:15:d8:a9:f6:48:a5:fa:21:43:8e:0e:11:87:51:9d:4f:0f:
a5:0d:f4:3b:40:65:7b:48:e4:70:73:45:52:ae:3b:5b:6c:1e:
57:34:b4:82:68:3c:f5:0f:a9:d7:a4:a7:11:d0:ad:8a:bd:13:
2b:7a:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:37 2025 by rpki-client