Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa
File: ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa (raw, json)
Hash identifier: erZyO6KLG6ezuTC0iuW3/ceSXN2lXYr6LnP2oE4dMZQ=
Subject key identifier: 9C:31:37:1C:5D:77:82:F1:01:25:A3:D3:58:9F:CB:3F:FA:09:CE:EC
Certificate issuer: /CN=e7f210e3-2923-4916-a0dd-8d3cc9158403
Certificate serial: 010D0C9F432858489BA0B4924BBD491639FCA740
Authority key identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 394837
IP address blocks: 2607:9d40::/32 maxlen: 32
2607:9d40::/37 maxlen: 37
2607:9d40:800::/37 maxlen: 37
2607:9d40:1000::/37 maxlen: 37
2607:9d40:1800::/37 maxlen: 37
2607:9d40:2000::/37 maxlen: 37
2607:9d40:2800::/37 maxlen: 37
2607:9d40:3000::/37 maxlen: 37
2607:9d40:3800::/37 maxlen: 37
2607:9d40:4000::/37 maxlen: 37
2607:9d40:4800::/37 maxlen: 37
2607:9d40:5000::/37 maxlen: 37
2607:9d40:5800::/37 maxlen: 37
2607:9d40:6000::/37 maxlen: 37
2607:9d40:6800::/37 maxlen: 37
2607:9d40:7000::/37 maxlen: 37
2607:9d40:7800::/37 maxlen: 37
2607:9d40:8000::/37 maxlen: 37
2607:9d40:8800::/37 maxlen: 37
2607:9d40:9000::/37 maxlen: 37
2607:9d40:9800::/37 maxlen: 37
2607:9d40:a000::/37 maxlen: 37
2607:9d40:a800::/37 maxlen: 37
2607:9d40:b000::/37 maxlen: 37
2607:9d40:b800::/37 maxlen: 37
2607:9d40:c000::/37 maxlen: 37
2607:9d40:c800::/37 maxlen: 37
2607:9d40:d000::/37 maxlen: 37
2607:9d40:d800::/37 maxlen: 37
2607:9d40:e000::/37 maxlen: 37
2607:9d40:e800::/37 maxlen: 37
2607:9d40:f000::/37 maxlen: 37
2607:9d40:f800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b4:92:4b:bd:49:16:39:fc:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f210e3-2923-4916-a0dd-8d3cc9158403
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=82b5e75e-70e0-40b0-a41d-2dea5715951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:67:b2:c3:bf:b7:ea:a3:f3:3c:76:8a:b6:
03:bc:cd:c6:db:eb:97:c6:22:1a:7f:33:a3:ee:25:
a1:7c:f9:9f:24:38:44:28:ae:8a:05:d0:41:2b:4f:
8d:77:49:b8:55:d6:cb:a0:27:51:6e:e9:56:45:ec:
9d:57:3c:b6:9b:9b:b0:25:fe:e0:0b:11:64:e8:53:
f2:a7:02:01:d6:54:27:2d:e0:27:28:c6:5e:29:90:
40:fa:63:55:f4:c2:88:a8:aa:b2:97:b1:b3:56:47:
54:e1:19:ff:e3:dc:3f:f7:70:4e:20:a3:cb:e0:90:
a5:b3:7d:01:70:22:da:ab:8b:91:50:b0:ae:ed:36:
39:e8:25:d2:37:b0:af:7b:77:3a:cb:25:04:69:59:
90:07:27:2b:e6:a6:2c:97:24:a6:22:d2:2a:47:c9:
59:85:d4:05:1a:82:28:e2:2e:ad:1d:cd:3c:c5:5a:
14:af:7f:c7:53:08:30:2b:1c:c5:be:82:6c:dd:08:
c1:6e:d4:7c:04:e9:d7:b6:19:51:28:b7:01:98:f9:
fd:3f:ed:b5:6b:c3:d6:f7:0b:c8:f9:07:50:4a:8b:
a7:f9:2c:98:34:72:a2:0a:e6:43:af:1c:20:12:39:
64:e1:f8:41:34:4d:3d:2e:10:ba:94:80:70:6a:32:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:37:1C:5D:77:82:F1:01:25:A3:D3:58:9F:CB:3F:FA:09:CE:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.crl
X509v3 Authority Key Identifier:
keyid:BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:9d40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:3f:5c:aa:b2:73:0d:40:49:41:cf:ac:1d:48:8b:b7:e3:b9:
6d:f3:24:e4:19:ea:74:09:44:1e:84:bf:9f:73:7c:67:40:41:
bd:30:be:d5:04:3f:36:48:df:7c:0c:1a:86:d6:4e:e3:1f:c8:
25:57:6f:8c:f0:92:66:59:60:5d:33:5d:4c:52:6a:61:a8:9f:
9f:07:c9:60:9d:f4:2c:8c:b8:07:8a:0c:e1:df:91:7c:25:c8:
7a:e3:b2:79:e6:ca:97:c9:1f:f4:ed:3b:c9:1c:3d:76:55:30:
54:b1:1b:90:22:50:5c:a5:02:b3:19:55:98:46:d6:67:7e:eb:
b6:20:e6:c3:40:95:fb:b5:05:8e:25:ed:20:76:9e:3d:54:ca:
26:b7:f1:63:b5:d6:bc:ce:be:23:a8:ce:5d:42:cd:a2:56:87:
a4:bb:a5:a4:0e:48:69:bf:16:7a:c8:cd:72:92:e3:76:89:af:
8e:48:2b:5d:70:bc:4e:ac:5d:2c:76:63:c9:8c:8c:fb:01:14:
4f:f6:f7:ac:07:fb:ab:83:14:bc:20:e5:21:3f:ef:1a:23:3a:
f5:72:1d:80:c1:40:4e:b7:49:17:86:62:07:9c:c9:08:2a:3f:
80:f0:55:46:f0:29:a7:cb:63:52:ef:3e:a2:19:51:5c:11:c4:
b9:42:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:12 2025 by rpki-client