Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa
File: 0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa (raw, json)
Hash identifier: YB2lugDPjbg1vmmIzpNrRnNblww9XMNl6q2GNWGXFtA=
Subject key identifier: B9:68:0E:D1:7F:DD:76:06:5C:7E:95:14:B8:71:EA:43:3C:E6:CE:7E
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F43285849088175031D5B790864818F00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 61317
IP address blocks: 2604:4500:1a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:75:03:1d:5b:79:08:64:81:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=f2ec2515-8788-407b-9c49-2e682cd6fdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:dc:cf:5b:33:e5:29:f4:7e:b0:c3:f4:db:
2e:b3:db:2f:57:c3:42:88:a0:a8:61:18:3a:0f:74:
68:1f:d2:eb:a5:52:15:c1:62:51:9c:b5:71:fd:c7:
2c:e1:54:de:a9:89:f4:f2:4f:ce:21:f6:df:60:55:
33:58:59:44:04:5f:7e:a6:db:86:51:7c:9b:86:3f:
25:a5:61:32:48:08:fd:ec:01:67:b6:78:aa:86:7e:
2f:61:2c:d4:a5:f2:11:f9:34:b7:87:a2:7a:d9:fd:
8a:c8:bb:0a:e6:b5:49:87:68:8d:7c:c0:fc:5a:8b:
e2:32:2a:0b:cc:7d:a6:7f:e0:c0:26:25:e6:6a:d9:
c8:80:6c:ec:82:9f:b5:c7:a6:2d:b8:76:6a:93:8e:
87:4f:56:62:2d:71:b0:de:3c:67:cd:b3:15:50:3c:
fd:39:b0:d7:66:54:75:da:11:da:88:e8:e1:16:e9:
39:98:fb:ea:9f:bc:7f:6d:f1:51:b3:bd:4f:e5:46:
9d:3b:de:06:49:20:53:78:f4:cb:cd:14:02:7e:11:
a8:e0:b6:e5:fd:80:c3:ce:76:71:ea:56:31:a1:f8:
8d:c1:22:ac:02:54:08:8a:ef:42:22:68:af:0a:8d:
8e:dc:e0:60:ce:40:7c:b8:5a:0d:09:6d:52:72:47:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:0E:D1:7F:DD:76:06:5C:7E:95:14:B8:71:EA:43:3C:E6:CE:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4500:1a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:91:2f:35:cd:c5:4f:42:c8:01:4f:52:1b:a1:f7:a6:b5:96:
77:dd:e5:d6:0b:f8:22:de:4a:19:5f:fd:97:ff:13:20:50:c1:
6e:1f:37:1a:cf:33:64:c2:2e:6c:c9:ae:fd:be:2b:b5:3e:c8:
ff:dc:0d:7f:38:0c:fd:86:4a:76:a1:2c:f7:f7:98:0f:00:4c:
26:d3:4c:ec:9d:17:94:97:e7:9d:40:1d:f4:f5:ba:37:54:5a:
a8:8b:93:34:be:69:99:a4:5e:13:51:86:f6:7f:09:16:51:dd:
7f:18:a7:e9:60:3e:33:de:89:5a:bc:c8:9b:d9:f2:eb:04:2b:
1f:90:53:30:b1:93:c3:b7:b9:21:47:ae:69:85:19:7f:eb:63:
81:72:9a:36:6d:87:35:bd:90:bd:fa:86:4f:c8:21:69:67:65:
9b:03:b4:81:c8:8b:57:9e:53:5d:4a:e9:e6:e6:3a:6b:d7:49:
df:c9:35:a8:69:f0:c3:f4:34:a7:da:93:55:40:36:45:aa:4f:
df:19:03:ad:ce:ba:c3:78:b2:3d:5b:f4:a0:7a:28:92:e1:1c:
49:3b:58:90:27:a6:6a:51:ba:8f:4f:08:d6:c6:28:2e:04:e3:
26:4c:5b:87:7e:c3:e4:1f:16:9c:98:91:91:68:7e:c5:aa:89:
b7:34:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:23 2025 by rpki-client