Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa
File: 66629caf-1ba6-3e84-aedd-cf8f644f2783.roa (raw, json)
Hash identifier: b6V9UQ4CXSdIh0rddcCdd9+aUHBGLIvm3Jp1LTt0kOI=
Subject key identifier: 76:6C:08:8A:8F:C2:9F:A1:0C:9A:07:20:81:69:56:6E:22:2A:0F:6C
Certificate issuer: /CN=71ff2374-a419-4dc0-be35-7dea3236aad7
Certificate serial: 010D0C9F43285849244E7C5311F84D47322AF82F
Authority key identifier: F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 7018
IP address blocks: 2001:1890::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7c:53:11:f8:4d:47:32:2a:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ff2374-a419-4dc0-be35-7dea3236aad7
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=b9ff6136-34f2-4810-8458-9825b97c717f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:86:7e:6f:d4:3a:17:43:7d:bf:7f:16:2c:
4d:af:9f:3c:e2:2a:29:81:73:0b:09:af:4a:cb:1b:
80:ff:50:73:17:f0:55:9b:6e:61:63:ba:81:0d:8a:
67:9a:4f:e6:0d:a1:d3:bc:57:e1:30:53:37:3d:99:
7f:a1:4b:2b:2d:3f:12:3f:21:f2:60:b9:c9:a9:01:
1a:d4:f7:bb:f0:ee:48:52:1b:21:de:e2:ca:99:b7:
2b:d5:55:9e:fd:b1:8a:f4:43:ae:be:f5:9f:94:91:
e4:11:8f:8c:e4:41:f9:ec:0b:11:5f:7a:e5:75:cf:
d7:bd:35:e6:95:fd:44:0f:fb:c5:e7:f9:8b:02:4d:
d9:c2:4c:44:4e:e8:c4:e3:bd:df:d8:17:19:11:a5:
1b:78:c7:0c:a3:f8:52:4d:e6:2d:71:9e:ab:e2:1b:
e6:81:10:59:c7:6f:3b:7b:0a:ee:3d:1e:82:57:43:
32:34:8c:b0:7f:83:9d:2f:20:46:18:8d:52:a3:87:
6e:90:d5:a3:4f:87:c4:c3:b3:f8:24:c3:76:ed:87:
81:75:cb:d1:3d:b8:4d:5f:d8:6d:b4:27:b7:74:17:
fb:35:b6:97:80:99:cc:bf:b9:b7:00:f5:b9:b7:4a:
5f:b5:4e:e7:d9:0c:ab:85:2a:c5:ae:da:0a:e2:22:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6C:08:8A:8F:C2:9F:A1:0C:9A:07:20:81:69:56:6E:22:2A:0F:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/66629caf-1ba6-3e84-aedd-cf8f644f2783.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.crl
X509v3 Authority Key Identifier:
keyid:F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:1890::/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:9b:67:fe:a5:a0:69:23:64:d5:70:87:a2:71:39:18:55:57:
08:be:11:26:18:10:88:b1:4d:65:b1:85:0a:c2:f2:f0:79:b2:
9e:93:00:f6:6c:9d:18:85:31:6b:6f:b2:46:a8:79:cf:70:bc:
b9:58:f4:f8:39:a3:e0:de:28:10:a1:1a:8c:22:2c:4f:82:b6:
2e:5b:8b:d0:18:ea:a8:a7:4b:4f:69:92:4d:43:7f:c1:17:cd:
c9:2a:4d:b4:c2:a5:d6:d6:b0:2e:e2:1b:ba:51:b4:ec:ef:d9:
81:a9:2b:02:e4:be:06:50:ce:73:a8:79:3f:7c:60:c1:a3:41:
ea:55:05:f9:e9:3b:ca:19:84:34:8c:dd:f6:45:b2:18:be:03:
2b:99:de:49:64:37:16:8d:cc:00:bd:56:08:d3:57:ba:c9:4c:
e3:af:a5:f8:95:aa:32:d6:57:ad:dd:a3:b8:1d:6e:b7:23:d5:
62:18:55:d4:b2:34:06:a4:e7:12:5b:7b:8f:63:be:ef:8d:db:
1e:ae:c3:dd:d8:de:b5:60:d8:a2:22:4f:dd:f0:8f:14:f0:1e:
1e:38:6a:b3:cb:dc:8f:c4:a0:95:ed:ff:dc:ba:1a:13:b4:f5:
68:e8:4a:2b:65:5d:ec:eb:7a:26:44:29:28:ec:2d:fc:ec:a7:
ae:76:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:16 2025 by rpki-client