Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
File: 69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa (raw, json)
Hash identifier: KJn6nG0LmHwh/Opex7d2cEMAtMBMtpxs/zCJIyvyZOg=
Subject key identifier: D8:A5:0A:07:5E:FC:11:4D:38:05:11:0B:29:16:CA:B9:C9:9C:49:37
Certificate issuer: /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial: 010D0C9F432858490CB16A778F70FC467BCBCB00
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 16509
IP address blocks: 2620:121:5070::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6a:77:8f:70:fc:46:7b:cb:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=672d06aa-6542-4622-9a0a-9a98850e9078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:0c:eb:72:0f:79:48:b3:af:1c:cc:d5:f7:
5c:bb:23:f2:0e:b1:dc:75:ee:6d:64:c3:8f:ea:4d:
a0:bb:00:14:31:64:6d:58:41:2b:e1:a3:ae:d9:fb:
70:88:89:6a:ec:a3:c8:60:53:43:a4:6c:c9:b2:c4:
d5:84:2a:db:d2:75:7e:2a:61:0f:9a:3f:c4:dd:12:
61:cd:e1:1f:57:9b:7e:1f:ec:41:8c:52:8a:88:42:
f2:e6:4e:0a:23:97:f0:3f:83:9f:a4:7d:f7:83:b1:
7d:50:8f:76:f9:2c:0a:a0:ac:0d:fd:18:b0:d9:8b:
72:1e:be:f1:84:12:c6:02:4c:8f:c7:76:80:e3:7d:
4a:bd:64:e6:a4:00:92:5d:96:82:28:af:bc:9a:5a:
96:86:75:fd:77:c4:6e:15:c3:5e:57:31:25:f2:f7:
98:66:e5:50:4b:c8:a4:3c:1f:ff:6e:da:72:4d:0d:
c5:c6:1b:26:08:88:34:f0:84:97:d0:b9:47:25:0c:
8c:6c:9c:9f:6e:1d:da:62:e5:90:44:aa:84:d5:6b:
de:8b:86:d5:1b:5e:1b:ca:90:cb:0d:de:98:8f:88:
3e:d3:eb:e9:0c:16:bb:7d:15:d6:fa:1c:98:bb:d4:
de:61:77:f1:87:e1:38:b9:2d:a6:b0:90:8b:fe:83:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A5:0A:07:5E:FC:11:4D:38:05:11:0B:29:16:CA:B9:C9:9C:49:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
X509v3 Authority Key Identifier:
keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:121:5070::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ee:0e:f1:c1:30:34:17:71:44:44:46:c4:e8:fe:ca:82:ac:
93:92:4d:2e:99:45:a5:7c:5b:cd:c2:3b:1a:0a:5e:43:f5:59:
d0:b1:6c:92:19:2f:8c:99:36:d0:85:cb:23:b2:3c:f4:08:c4:
3c:7e:e6:8f:2a:53:bf:dc:82:9c:79:cf:14:37:50:4e:10:38:
73:62:c5:90:4b:09:f0:63:b9:3d:47:b9:01:97:d9:27:95:59:
c7:6f:4c:56:97:16:c7:ba:11:99:23:ac:fb:c5:83:9c:02:b5:
b9:ed:4a:df:86:5a:ca:a6:a8:a5:99:9f:3c:dd:35:74:aa:ba:
e5:a0:55:89:94:94:b6:49:7a:0d:f3:7f:02:80:d1:87:7a:f6:
ab:0e:3b:1f:7f:d5:ea:82:60:38:9c:ac:92:ab:a1:c1:09:e9:
f2:15:2e:7a:ee:b5:ee:21:1e:c3:67:1a:17:8a:a1:23:cd:06:
4f:c7:49:30:07:da:f0:d4:82:8f:fa:18:8a:d2:8e:f7:73:62:
db:9f:d9:fe:d7:00:31:a3:00:11:63:92:73:ea:2d:f5:44:e6:
82:83:b3:cf:07:ac:85:fe:c9:f2:1a:c2:75:b1:6b:e9:5f:a9:
71:7a:e9:9f:b0:1d:67:f7:4b:57:d2:99:59:35:44:38:ea:e9:
f3:32:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:26 2025 by rpki-client