Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa
File: a68416c0-1952-319d-8981-4f1a935dc45c.roa (raw, json)
Hash identifier: Ls6szoaJwWdCZR7iBDAZyg+DVAiWx3otSokBmFR+SRQ=
Subject key identifier: A7:2B:26:E8:CB:EC:90:75:1E:80:3E:0D:2E:C7:A6:FB:B3:C2:8A:34
Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial: 010D0C9F43285848F65BDC27AC8D33B1741E7E80
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 0
IP address blocks: 2001:504:3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:dc:27:ac:8d:33:b1:74:1e:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=55bdbb03-5129-4e2d-a9be-4594f8003e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:85:d7:ce:85:0b:06:dc:b9:f6:c5:d4:70:
76:01:05:b7:40:7e:f1:1d:0f:9f:d9:56:9d:68:43:
dc:d9:a9:f4:b7:16:95:bd:aa:5a:24:fd:ec:09:d8:
97:fe:78:c3:51:43:99:d0:0c:b6:be:20:79:46:c5:
32:44:9b:5a:0e:e8:65:67:9d:fd:1e:ca:21:20:6c:
f2:e0:72:60:a7:94:9e:99:46:2a:27:d5:80:d7:22:
59:09:7a:fa:d8:89:0c:35:fb:5e:d3:4a:0c:06:07:
39:e4:5e:fd:27:a3:51:36:82:c4:ec:d5:ed:a7:75:
a8:83:6e:9b:29:6a:eb:47:ca:48:e4:c9:8d:f6:49:
ae:85:63:e4:cd:49:97:0c:01:12:ec:39:d8:69:f8:
c4:c0:f9:92:05:2f:dc:63:eb:fc:bf:7a:12:04:45:
ec:57:54:bc:63:78:66:65:1d:39:ce:ba:85:07:82:
c8:af:ef:29:ea:69:f1:37:a8:bc:0c:5b:d9:55:b5:
2a:ec:14:54:82:0d:70:41:00:66:22:b8:e0:30:ee:
69:06:03:8f:47:62:0e:2b:01:99:a6:c1:c1:13:a7:
c3:f7:ac:69:e5:71:22:19:ac:60:3c:5a:31:f9:19:
74:66:56:36:bc:a1:92:8d:ac:38:26:30:e5:af:0f:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:26:E8:CB:EC:90:75:1E:80:3E:0D:2E:C7:A6:FB:B3:C2:8A:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
X509v3 Authority Key Identifier:
keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:3f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:6b:fc:85:7b:94:41:66:ae:d2:a9:29:2f:7e:05:54:8b:33:
c4:4f:fa:9d:f4:7d:68:b0:db:9f:5a:23:b2:10:ab:7a:04:d8:
eb:d3:1e:80:09:dd:f7:a2:fd:45:46:5f:6c:b3:47:12:bd:29:
de:59:18:83:4c:04:81:4d:da:93:ed:fa:6f:6a:6e:84:a6:03:
93:74:a5:59:98:fb:46:1d:df:6b:62:70:2e:bb:fc:5f:7c:f1:
ce:13:d9:ef:ca:e5:e2:cd:d9:d0:94:67:f5:e9:78:26:6c:3d:
97:fb:c2:c1:5a:8e:21:ad:89:85:f3:1e:f8:c9:1f:75:95:cf:
3e:ce:1c:ef:15:3d:9f:42:1d:db:04:b9:66:da:f1:cf:e7:34:
32:27:b7:c5:b2:3a:da:61:96:2c:de:86:d8:5e:0c:a9:d4:d8:
be:02:8f:88:2b:19:ed:ec:e7:7d:55:f9:6f:f4:38:54:6f:21:
02:35:33:5f:a3:3c:99:b1:c8:60:13:98:47:b6:f4:8c:fe:07:
25:f8:9e:5e:b7:13:90:24:b6:71:43:db:19:e0:87:2d:69:22:
cb:5b:71:83:9c:47:79:ef:a7:ae:0e:09:4b:e1:74:0b:da:17:
82:18:92:19:7e:4f:2c:71:2a:cc:f6:2c:0b:94:1a:8f:f6:9c:
ee:40:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:29 2025 by rpki-client