Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa
File: c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa (raw, json)
Hash identifier: tCbUZKr/hEfodExktWdClo+lBHWDHIo9165W+6ICgcc=
Subject key identifier: 90:07:F3:11:55:F5:FB:D1:C8:0A:C7:84:59:9E:92:3B:95:03:C1:9E
Certificate issuer: /CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Certificate serial: 010D0C9F4328584957F3F67E7E970200FE384300
Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 2620:122:f000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:f6:7e:7e:97:02:00:fe:38:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=4227ec40-f9eb-44ec-b5f4-bef682aca042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:54:f3:aa:3f:f5:b3:1b:6c:a7:9c:13:4b:
c8:22:64:6c:43:07:ab:58:9a:02:17:b3:2f:7f:9c:
10:26:34:99:7d:93:f5:ba:1f:a0:ca:49:09:33:fb:
4a:c1:e1:67:53:fd:02:4d:63:16:d7:2d:45:14:e1:
e6:76:db:5d:aa:fb:0d:e0:ad:2b:e3:9b:c3:cd:55:
6e:89:1c:89:e8:e3:09:ef:b8:c6:45:42:6a:24:94:
06:0a:26:5c:ef:28:8c:a5:03:80:8e:1b:f9:9a:62:
57:d4:f0:33:04:d4:8c:d7:72:31:1a:bb:bf:cc:2b:
96:59:af:e3:57:2e:6b:15:5d:22:1a:12:6e:77:71:
68:f8:6a:e6:4c:81:37:66:76:6e:db:a7:a4:df:36:
db:62:fe:c0:ec:57:14:34:ff:2f:ad:31:84:4e:cb:
9f:88:84:a2:c6:cf:e2:82:5d:72:83:41:08:40:3c:
0c:a7:6f:ff:fc:b6:3b:65:c5:04:49:38:31:34:90:
3e:b9:c8:76:d5:38:f3:2b:d9:94:1e:49:78:b7:cd:
94:31:5a:a2:e3:b5:96:51:b6:f1:21:a8:ea:3b:15:
54:2f:df:82:f8:c9:de:33:b4:e2:b7:b6:36:f6:ac:
0b:7c:5b:98:fa:7e:b8:63:77:1e:d8:0f:af:a3:7a:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:07:F3:11:55:F5:FB:D1:C8:0A:C7:84:59:9E:92:3B:95:03:C1:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl
X509v3 Authority Key Identifier:
keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:122:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:0f:0f:b0:c0:73:73:cd:9c:74:b2:6c:14:38:d5:48:29:db:
76:2c:62:cb:b4:79:2c:06:15:50:a1:6e:ba:d5:72:7f:25:66:
e9:f7:62:2c:ce:29:e3:f1:1c:f1:72:cb:20:5f:d0:08:78:c1:
44:04:68:05:a6:b2:92:81:65:8c:28:b2:db:e0:d8:97:95:69:
af:49:b0:13:12:98:4b:df:e5:98:60:2b:4e:8d:35:31:eb:ff:
bc:04:d2:1d:1c:b8:27:06:f2:27:60:c2:56:ac:2e:e2:02:ef:
45:81:0b:0f:d6:38:57:5c:5b:42:1a:36:95:d7:fc:db:32:35:
c1:f9:ed:a6:67:9c:f3:a2:ac:7e:4d:88:a6:b2:62:ee:20:e7:
98:82:6a:b8:12:e5:f2:cc:61:f6:80:11:56:bc:95:ec:d6:b2:
24:7b:13:15:4a:59:5e:0c:51:af:8e:c6:3f:62:dd:c9:e3:e5:
30:81:cb:1a:2d:ef:42:f1:8a:7d:db:34:d9:fe:56:83:a1:78:
fe:6d:96:c5:c4:37:91:1a:87:7d:19:46:a0:57:82:9d:1c:a0:
c6:ef:5a:3d:5c:12:fa:f2:c2:8f:43:b0:3d:2e:1d:5b:0a:13:
0f:c7:57:36:70:c0:13:31:ae:30:13:2f:f3:b5:ca:0d:0e:1a:
fa:d3:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:07 2025 by rpki-client