Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa
File: d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa (raw, json)
Hash identifier: +eMUyVFokB/WUx3S+EHqs4VgiAK7jbhaRoie7Blkn+4=
Subject key identifier: D1:17:F3:9A:1A:F8:BF:CB:64:6C:44:14:B2:3E:70:44:D4:1D:57:39
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848AF2B7D883BB6FCE15DF80D80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 396982
IP address blocks: 2604:a940:301::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7d:88:3b:b6:fc:e1:5d:f8:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=beccc4f8-79b2-4e15-aeea-9b3f1cb69538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:4a:cf:a0:67:a8:fd:d7:e5:01:ce:bb:a8:
e4:78:67:8d:e7:5f:fe:03:7f:8d:48:11:e2:6b:75:
11:ec:8b:f3:f1:a7:ec:9b:96:60:02:1e:53:bf:74:
46:ee:02:1e:f4:46:4f:db:7f:16:b1:72:9b:8f:e1:
37:cc:3e:52:4c:f3:66:23:dc:e6:7f:19:65:4f:db:
23:51:85:4c:cc:f5:70:19:19:5b:2a:a5:b1:5e:05:
4a:c7:71:9b:ea:e0:48:93:27:86:fc:5c:4c:9f:e7:
ff:37:09:b4:c3:53:ac:a9:26:7e:4b:ec:2d:86:4a:
22:fb:44:44:49:33:f8:5c:7b:79:58:e4:7b:29:70:
b0:2b:f3:8b:88:c9:67:2b:c9:c9:74:b9:00:b6:a6:
c8:76:9d:17:4a:0c:ce:1d:7f:b6:a0:35:65:8a:b0:
a8:52:8a:50:c9:25:1d:20:99:89:d3:49:42:40:94:
6d:5a:a1:d4:1d:bd:30:4c:7e:51:ae:f9:23:56:1e:
27:e9:c4:94:9a:71:0c:03:47:f7:c0:96:36:a1:c0:
bd:5b:bc:13:65:8c:d7:79:ed:fd:bb:14:b4:dd:86:
04:14:17:e5:ec:00:d1:d0:e0:19:76:f4:1a:81:ee:
af:6b:da:90:1e:37:25:84:aa:5e:ca:18:54:0e:1e:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:F3:9A:1A:F8:BF:CB:64:6C:44:14:B2:3E:70:44:D4:1D:57:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a940:301::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3a:dc:9d:6a:94:42:b7:98:5e:36:c8:ec:2f:e3:3a:ab:ec:
ce:60:e2:20:4e:e2:1c:2d:08:a6:93:0a:cc:ee:de:7b:c3:d6:
86:07:a4:62:e5:b9:eb:ce:63:10:d5:7b:07:13:45:d5:04:61:
66:b6:14:a8:9d:e9:11:f7:c3:36:5b:00:fa:6d:15:2a:06:ff:
b9:23:bd:c9:b5:ae:ca:85:75:9c:fe:db:52:3a:a9:67:bf:99:
57:a2:08:07:1f:b5:3b:01:de:79:aa:a7:d9:f4:f0:2a:39:2e:
7b:98:17:18:21:51:2c:78:83:47:94:79:36:de:df:92:75:6c:
e3:b1:d7:59:59:36:bc:cb:29:5f:45:a7:b8:cd:79:67:ac:3d:
b1:86:9e:3c:c7:f6:02:4e:d2:8a:7e:66:5b:e2:74:4c:2e:55:
77:7d:79:66:87:7d:e7:d8:6d:02:03:26:36:67:b5:3f:18:19:
fe:bf:db:5f:d9:da:73:4c:78:9f:23:11:bd:a2:ed:bf:c4:4e:
9f:33:fc:c2:53:e0:6c:9a:a8:22:ee:76:00:d0:91:2d:c8:f7:
ff:65:b5:f3:7e:26:e0:b8:d5:a3:db:b3:98:a9:0e:a7:82:5b:
f5:1b:9e:36:f4:57:5e:d4:06:85:db:b2:23:ff:dd:3f:ac:99:
88:9b:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:01:30 2025 by rpki-client