Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea73ae73-e960-321f-a8d9-643b3835c455.roa
File: ea73ae73-e960-321f-a8d9-643b3835c455.roa (raw, json)
Hash identifier: 4A78BhTyz1poriviRc/kSd5hOTUALea2N/uWxbZtR9w=
Subject key identifier: 3A:35:B0:BB:7C:AA:EA:EB:3D:34:7C:4F:B2:80:7F:7A:8D:7A:64:BB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB153CF938920B7CDF73170
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea73ae73-e960-321f-a8d9-643b3835c455.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396590
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:53:cf:93:89:20:b7:cd:f7:31:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=f7328adb-8d7e-4e43-8f7d-77a6f22d223e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:1f:d3:ff:32:bf:d4:d5:59:24:43:35:b1:
77:57:b7:73:16:c6:ba:13:db:fd:d9:ad:20:3e:8f:
90:66:51:a5:61:c7:95:e6:68:aa:10:01:07:78:0d:
82:b7:3f:6d:c5:22:17:1d:80:52:33:7d:54:39:9c:
fc:2a:f9:d7:9f:f4:6d:ad:62:77:28:2b:6e:03:24:
7d:78:2f:77:03:ec:ce:b2:d0:df:83:ea:ac:a7:38:
30:5d:06:d5:8b:f8:71:96:69:59:88:c9:db:d6:0e:
6a:41:b2:64:ef:cf:d2:4f:03:db:48:79:af:ed:b2:
7b:22:a5:1a:58:04:8e:a6:38:6e:fd:de:b0:ac:92:
a5:1e:c0:3f:13:03:92:1e:2e:96:24:59:b9:4b:50:
25:64:3d:14:24:b8:93:10:f1:52:19:b8:aa:8a:46:
50:9f:68:13:0a:84:b9:88:c8:35:60:19:ee:1c:58:
58:cf:14:21:f7:3b:10:08:f5:c7:b9:0f:5a:4d:af:
77:7f:96:9a:0e:d8:f3:52:9b:91:50:e1:24:29:2f:
c8:c2:cb:e3:50:77:0f:42:f5:d0:ba:1d:9d:b8:8e:
ee:30:b8:01:af:af:6b:be:f9:ab:96:ff:fc:37:b9:
a2:b3:f9:43:d5:91:75:c2:7f:c3:b2:be:66:42:b1:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:35:B0:BB:7C:AA:EA:EB:3D:34:7C:4F:B2:80:7F:7A:8D:7A:64:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea73ae73-e960-321f-a8d9-643b3835c455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ab:86:e8:2e:4f:dd:3b:6d:81:23:da:2b:d0:74:03:3c:c7:
23:67:ab:a8:8f:4a:55:62:0f:55:82:9b:ce:15:6f:7a:f3:55:
3a:08:3e:64:e2:7d:ac:0e:32:b5:1a:10:bb:b0:83:41:f8:2a:
78:ba:4b:cc:9b:c8:84:e4:2e:a0:d6:97:ae:d5:aa:ad:5e:78:
8c:80:0e:a7:57:9b:d9:68:5f:cf:79:b7:54:51:18:52:9f:12:
f5:79:d8:00:1d:4e:db:07:b4:5b:c6:f3:55:1e:63:2f:4f:32:
c9:33:b5:ad:56:8a:78:53:88:83:b1:29:30:d0:38:9e:55:d4:
1b:f3:4c:94:33:44:0f:53:6b:20:99:6e:91:5a:bc:41:52:08:
12:29:42:39:0d:f2:de:d7:33:36:4a:a9:37:f7:41:1d:18:d2:
af:42:02:c8:18:09:1b:19:30:24:8d:5e:0f:a2:62:13:e3:5d:
9a:46:6b:ab:e0:5f:ba:7a:7d:b3:7b:56:2e:9b:9a:71:e0:88:
0d:ed:37:ba:52:46:62:8a:e6:3a:cf:34:c9:1c:01:bc:1c:8e:
c9:d6:2f:7b:68:e9:b1:73:27:81:06:ac:37:29:03:e4:ef:aa:
f2:94:ac:a5:c6:8c:1b:83:70:99:99:62:69:86:de:19:41:3f:
34:ab:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:09 2025 by rpki-client