Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
File: f6285d45-9269-3c7f-af51-21be86401f66.roa (raw, json)
Hash identifier: MWY1RZjj9MW//+aREWhwAkpoID9uKlQHA4TZisAth7o=
Subject key identifier: 3A:4D:D8:02:9F:63:BC:BE:59:A4:AE:1C:1D:50:6C:4E:B0:EA:8E:D4
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858492CAE979DD659E3063C96FCC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 2914
IP address blocks: 2001:418:3ff:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:97:9d:d6:59:e3:06:3c:96:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=810af2a0-ac96-4d00-bb92-39bcfcaec95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:32:7c:fa:e6:3e:40:40:e7:85:21:ff:fe:
7d:f3:9d:0f:22:2a:a1:d7:f3:84:35:25:85:87:5b:
ad:40:04:49:43:1b:8a:1e:02:ce:ea:a0:3d:3f:33:
42:34:eb:5d:8d:7e:ae:7e:64:f1:57:47:92:7d:15:
73:44:cc:60:43:97:7e:d3:fc:70:c3:fc:00:36:b7:
d3:7a:80:d1:f8:6a:f2:00:32:ad:a5:df:94:36:f1:
cd:4c:60:8e:0f:d9:de:49:f9:d0:4a:3b:2f:77:3b:
3e:3b:37:5d:66:d9:18:7e:59:89:02:14:e3:b2:26:
e5:60:77:c5:2f:7e:b9:68:40:e4:f8:f0:32:09:1f:
af:46:74:30:90:09:c8:8d:68:fa:7b:a4:88:5d:a9:
76:d0:f6:a8:d0:34:0f:63:dc:c1:e8:e0:dc:7b:73:
71:59:9a:98:68:e7:86:5a:6a:03:d3:8f:c4:dc:fe:
cc:5a:2b:4c:68:12:7a:87:b1:9a:19:47:f5:ec:3d:
28:36:dd:9c:8d:ad:d7:d1:c9:98:bf:f1:86:15:c1:
ed:2b:60:8c:3d:50:98:60:d7:64:5c:c5:0f:45:b1:
cc:8c:fd:b1:fc:ed:f0:8a:d8:e6:bf:47:81:ad:d2:
54:b9:70:70:ca:c9:ee:a6:1e:2c:d9:69:65:2c:fa:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4D:D8:02:9F:63:BC:BE:59:A4:AE:1C:1D:50:6C:4E:B0:EA:8E:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:3ff:8::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:24:17:e3:40:23:73:23:e1:2e:c8:57:a4:cc:1e:f2:7c:eb:
ec:ef:89:53:aa:d7:8a:35:d1:7a:d4:1a:5d:05:4f:49:96:b4:
f9:b9:b4:a3:d2:04:d7:43:57:ce:ab:2c:31:17:78:87:7f:17:
6d:29:0b:94:3b:98:d0:79:6a:60:4a:1f:47:1e:fd:fa:00:85:
31:ca:6a:e7:c4:6d:fb:0c:dd:8f:64:00:d4:e8:d3:d9:2a:2f:
5a:50:dc:b3:e8:98:bc:91:8f:d9:6b:2e:ff:b2:c6:29:f3:0a:
3e:28:47:43:8f:4f:75:20:cd:b0:1e:82:cc:ad:7d:56:6a:36:
56:3c:45:a0:df:55:82:73:7a:ec:86:34:9f:9a:1a:80:bd:2b:
f1:5d:b1:27:24:72:8b:09:38:e4:19:86:cb:e3:db:d2:47:87:
9d:89:32:73:b9:4e:c9:f3:bb:04:63:5d:cb:75:5e:6a:c4:09:
2b:4b:57:43:4c:a6:03:2e:e7:89:40:3a:93:f9:32:14:d9:8d:
95:e1:fe:8d:95:27:31:98:f9:4b:3c:3b:fe:e3:99:c9:fa:75:
fe:34:21:e1:30:19:6a:d9:0a:ad:89:66:bc:63:92:00:b0:e8:
0c:af:17:d8:50:d3:6b:45:9d:87:f6:f7:a0:2d:4b:2b:d7:df:
50:58:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:31:39 2025 by rpki-client