Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa
File: 2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa (raw, json)
Hash identifier: DGAB+Pibmceek9LVt59yA9qf5ztw2rcKxQkmkkd/vd4=
Subject key identifier: 9B:C2:DC:F6:E2:AD:D3:A2:6C:17:4B:F6:F3:B9:C6:01:FF:62:AE:39
Certificate issuer: /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
Certificate serial: 010D0C9F43285848CDE1179B9B5C35C28D7FF1E0
Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 26737
IP address blocks: 2620:14:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:17:9b:9b:5c:35:c2:8d:7f:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=9425bee8-95e3-47f7-9b50-68c30e5307d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:63:8c:a4:26:84:05:25:07:59:b6:ca:bf:
7b:31:c2:64:f3:2c:81:97:44:7c:bf:a4:de:40:29:
f7:91:13:b2:7c:66:96:5c:67:ba:e0:d5:a9:0b:de:
18:d9:0e:66:81:8f:79:61:77:cb:89:7b:65:69:79:
d0:6a:04:21:08:62:be:dc:ce:cd:0f:20:b1:49:90:
15:2d:5a:c6:5a:53:8e:b5:c6:39:c7:aa:c2:a2:3c:
2c:84:54:1d:10:0b:83:b3:9b:f3:03:27:63:b0:5b:
dd:2a:f8:66:58:1d:ab:2f:c9:88:52:4c:91:35:d9:
96:9e:c3:2d:09:40:e0:f2:ca:44:25:38:d1:e6:46:
b1:09:85:2a:8e:45:96:fa:4b:f7:e2:62:05:1b:3d:
e3:49:58:6a:70:22:4b:42:ba:c1:8f:c4:2e:81:6a:
f3:a2:2e:39:f3:5c:ac:50:65:52:57:6c:5e:2a:12:
02:31:20:66:f1:2a:ec:85:33:9f:5d:fb:ec:9a:86:
62:24:41:32:22:00:9c:b8:d0:af:b4:cc:19:17:3b:
78:c3:72:74:f6:1a:f2:a3:cc:76:87:2e:ef:08:d1:
a9:e4:ed:78:80:37:44:df:d0:36:7e:51:ad:25:de:
e0:43:0d:ab:2b:ca:41:a4:97:77:79:95:d0:a6:d4:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C2:DC:F6:E2:AD:D3:A2:6C:17:4B:F6:F3:B9:C6:01:FF:62:AE:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl
X509v3 Authority Key Identifier:
keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:14:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:49:88:41:6c:ce:92:59:1b:4e:9c:e4:64:75:93:92:d4:ee:
07:38:21:20:4c:43:98:0b:d4:a7:a4:c3:a0:bf:a8:b7:4b:cf:
43:91:70:88:38:a9:54:aa:0e:73:68:49:ae:56:73:22:5a:7c:
eb:34:ac:28:f5:cc:54:36:95:95:9b:5b:01:57:29:8d:32:3c:
4e:4b:7b:8a:4a:08:cd:d5:ff:df:6d:14:4f:77:e6:f5:6c:97:
9f:98:e3:34:e6:24:39:e8:3e:a4:9b:d3:c9:45:53:eb:46:81:
18:3e:75:15:1d:ae:94:af:87:e5:57:fc:b1:af:1f:cd:1f:26:
a0:d5:7c:f2:f8:db:cd:d7:2f:07:c5:79:dc:18:21:fe:0c:33:
03:2b:31:63:38:70:43:c5:b8:1b:e2:78:a5:f2:7a:0f:92:5b:
c1:9a:cc:ee:21:41:69:65:6e:4f:0c:18:cc:fa:ab:67:e7:45:
05:1b:c5:c6:e6:c2:8e:c5:90:81:b0:8c:b6:67:08:5e:14:d1:
a6:fc:b0:6e:fe:87:64:f1:6d:20:82:78:00:6d:9d:02:67:18:
ab:ee:86:92:f4:9b:2e:44:a8:d4:6a:dc:f4:e7:4c:1e:c3:d3:
63:59:27:df:1f:7b:d0:59:f3:9e:03:f6:69:5e:d1:07:3d:ed:
2b:1f:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:54 2025 by rpki-client