Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7a8934b4-5c81-3f07-9973-c81512da83ab.roa
File: 7a8934b4-5c81-3f07-9973-c81512da83ab.roa (raw, json)
Hash identifier: hPEdTq2E8D/+jhcnwP5RVnEbkROiFDdsGy85c4dbrKo=
Subject key identifier: 85:E0:87:C2:AF:33:5F:1C:6E:A8:BF:95:CD:5C:26:6C:24:B3:D4:19
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848FBF126B51543B79C11BA1080
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7a8934b4-5c81-3f07-9973-c81512da83ab.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 22781
IP address blocks: 2607:fb50:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:26:b5:15:43:b7:9c:11:ba:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=cca61937-997f-44cd-b7f4-e4df6390cc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:92:b2:e9:d2:f7:ac:81:e0:1c:56:30:6e:
56:af:af:15:2a:d5:ac:11:18:89:85:fb:ab:06:dd:
ff:94:43:cc:46:20:23:24:9b:85:f3:af:51:c7:7a:
b4:59:5b:03:40:5b:7e:3a:16:57:13:34:82:98:d7:
0d:07:98:ce:75:56:9a:7c:f4:17:6a:5a:51:32:6e:
25:8e:df:71:fc:73:92:5d:7d:b7:b7:bd:29:18:41:
2d:5a:46:0b:d0:c0:53:f0:55:e8:15:d8:b8:03:37:
df:87:09:ec:89:ea:f0:65:c0:fe:d8:22:63:65:11:
2f:34:3d:68:d8:fd:24:63:8f:c7:c3:2c:f0:4d:6d:
b5:9e:c1:ab:15:2c:ca:c3:32:64:92:9f:b1:12:3b:
c0:34:de:1f:67:5d:a1:77:52:11:c7:7b:6f:ba:d8:
c2:20:03:f9:16:81:03:46:ef:f1:be:80:02:03:9b:
aa:21:10:19:87:83:be:47:3e:86:2d:e7:a7:3a:89:
2a:67:a6:09:9e:89:b7:bc:52:d4:0d:c5:c3:d1:80:
8f:91:9f:bc:d1:9b:2c:6f:fa:2e:1b:f7:b7:f4:ec:
4a:5e:ed:de:5e:90:fe:23:f7:be:cf:e0:45:6f:43:
b7:f2:9d:c1:28:1e:00:42:4d:54:2d:71:7a:a5:88:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E0:87:C2:AF:33:5F:1C:6E:A8:BF:95:CD:5C:26:6C:24:B3:D4:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7a8934b4-5c81-3f07-9973-c81512da83ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fb50:8000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:67:ff:ee:57:7f:d8:cb:d1:6e:90:77:9e:ad:9b:33:cf:4a:
d1:fd:9e:77:77:77:2c:51:df:9a:67:42:c2:6f:3e:81:19:02:
99:c2:3c:57:14:e0:b0:80:40:41:4d:28:5c:cf:8e:b9:d9:a1:
2a:c8:fd:59:f9:0e:47:43:d1:9d:36:af:39:d9:6a:55:bf:03:
2c:54:b1:d7:db:48:ff:56:14:7f:7f:6e:49:e7:dd:e3:7e:f2:
d8:5e:c6:81:52:91:51:4b:c0:27:a1:b5:c4:e7:8f:38:1b:f5:
cc:a4:26:a5:3a:0e:1e:62:fb:0f:60:cc:59:1a:be:9d:b2:f3:
c3:38:b9:f8:ba:bf:d4:e0:ef:09:0c:a9:ae:e4:7c:8e:b9:58:
76:5b:08:09:a3:d6:31:f6:84:7f:c3:b7:b3:d6:07:39:a5:9f:
de:f6:04:6a:7b:8b:33:e2:0f:1d:aa:83:12:40:21:03:3c:14:
d0:b4:47:f5:48:75:a0:3d:92:b4:47:6b:70:16:1e:94:20:59:
c1:92:b5:91:01:3e:de:3a:2e:21:78:67:4d:1d:e3:8d:08:5f:
35:55:8a:f5:59:b7:f2:ee:5e:51:3c:4f:4b:f9:34:50:17:2e:
8d:48:11:2b:cb:1d:76:4e:13:ea:42:b6:68:d4:95:f5:0d:9c:
ab:86:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:47 2025 by rpki-client