Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa
File: 7af76982-96b5-37be-836c-3c4e67f26093.roa (raw, json)
Hash identifier: ok5XLj9w9k1D4EAzxBRS2TRqZtE6Y3VNLb2IMwvPCOs=
Subject key identifier: FE:CE:0A:86:B1:89:5B:7D:65:3E:78:C6:D5:02:74:0F:AB:AF:D8:1E
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584886B06DE5D9D9A48C8C193D00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 22781
IP address blocks: 2607:fb50:2000::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:6d:e5:d9:d9:a4:8c:8c:19:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=399dbe8a-03a5-402d-bbc0-32b08e44e497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:96:56:83:00:78:ae:39:00:52:7d:ea:b3:
47:44:68:2e:df:d7:bf:f8:ef:b2:d1:cd:93:30:29:
03:d1:ac:8e:01:65:58:8a:12:9d:59:ec:dc:ee:5b:
cb:24:df:08:a1:f2:1b:c5:82:c1:3b:95:41:c3:09:
28:e6:50:ba:47:48:21:89:18:19:55:87:36:74:a1:
42:16:2c:ce:69:60:b6:7a:c5:5d:ad:0a:f6:0a:ef:
94:75:a5:5a:c4:64:20:96:6e:03:9a:48:b1:15:8e:
30:64:8f:28:34:81:fb:c5:b0:2b:b9:4c:ae:0d:83:
49:aa:69:fb:b9:17:8e:53:a1:0f:6d:51:39:ee:5e:
65:af:cc:1d:ed:11:26:1f:da:22:37:97:9f:be:26:
64:cf:af:6a:5f:eb:94:f8:a0:e5:1a:d2:05:0b:9c:
41:5f:3e:ef:f7:7b:99:04:dc:13:09:c7:1e:93:1c:
88:13:dc:f4:3b:f2:ca:db:af:20:ca:95:46:83:55:
1c:23:f0:8d:09:71:17:6e:19:fd:f0:5c:9f:7f:79:
02:6d:23:8a:dd:7c:92:0e:98:38:08:31:07:a4:f2:
06:4d:24:96:9d:b9:84:e5:3b:9a:94:b7:e6:7d:ae:
03:97:65:9c:82:37:d4:23:ef:e3:c9:ba:7b:de:a4:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CE:0A:86:B1:89:5B:7D:65:3E:78:C6:D5:02:74:0F:AB:AF:D8:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fb50:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:9b:a6:ba:16:37:5e:5d:af:58:8e:a1:81:58:b8:70:be:e7:
5a:70:6c:24:14:8d:88:3e:16:9b:30:c9:83:43:b7:b5:0a:6b:
1c:4a:87:bf:63:69:af:63:c8:40:26:23:a5:16:58:a6:64:af:
28:20:9e:7d:d2:6a:f7:a3:f8:bc:20:4a:dd:4c:d3:6c:04:99:
f5:90:ae:cc:e2:5a:47:cf:f8:e8:fe:c3:f9:18:ba:08:90:63:
1e:06:eb:95:51:da:6b:fb:dd:a9:5f:38:ba:28:bf:19:c4:c5:
84:d2:58:a9:50:28:60:cf:fb:d5:4b:59:bc:49:db:0f:6c:f1:
3e:85:49:f0:53:2b:18:e7:d5:38:c5:8a:05:08:90:5b:73:cf:
3f:91:28:7b:d1:6b:b7:09:ec:d6:36:04:37:a9:3b:65:1c:67:
a6:10:45:af:b5:ed:01:18:eb:b5:19:3b:69:f6:00:04:bc:70:
bd:cc:e1:51:70:d9:ff:72:40:d6:35:f8:72:fd:c8:26:65:ec:
98:0a:a9:12:f1:38:2d:69:48:62:4e:da:6a:b9:36:f0:8f:94:
e7:c8:0e:63:34:4e:23:db:cd:c7:96:e8:8e:a8:e4:4a:8c:86:
f8:9d:2a:f5:77:fd:fd:43:cb:ac:c2:34:9d:9c:0e:74:75:19:
71:46:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:27 2025 by rpki-client