Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
File: 01259f44-7b0a-3214-9e77-66d79c010a77.roa (raw, json)
Hash identifier: eaOFR/O3VjCfBamg3QEr3cUSzytsB8Vnr8iZUAuBlzo=
Subject key identifier: 9B:43:5A:B1:A8:D2:1E:22:F0:9F:EC:32:9F:0A:EF:36:70:F9:E8:C3
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848CBFF68BDFC1DF599C4620D00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
Signing time: Thu 06 Feb 2025 21:50:36 +0000
ROA not before: Thu 06 Feb 2025 21:50:36 +0000
ROA not after: Wed 07 May 2025 20:50:36 +0000
asID: 401287
IP address blocks: 2607:fad8:1201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:ff:68:bd:fc:1d:f5:99:c4:62:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Feb 6 21:50:36 2025 GMT
Not After : May 7 20:50:36 2025 GMT
Subject: CN=e13a0541-dfd6-452f-b0d8-74673816e80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:90:12:73:bf:0d:67:52:3e:fa:11:53:82:
2c:d6:8a:44:29:e1:53:54:f5:d4:72:b9:b8:76:bf:
bc:57:39:85:f1:b1:2e:a5:e9:53:fd:1b:24:3a:e0:
cd:26:7c:f9:c9:3a:b6:5c:fa:c7:8c:a8:95:3e:bd:
2c:14:48:88:e5:dc:30:f7:0f:ac:e8:56:ca:a9:78:
32:3c:92:58:62:64:29:91:f9:70:a2:2c:e6:70:5d:
f2:7c:43:2c:9f:94:9e:85:f9:8b:b8:38:9f:02:e5:
bf:d4:06:02:24:7f:42:e1:9b:27:dd:07:11:6f:23:
92:49:eb:1d:a8:3b:68:d8:74:0e:4a:d3:86:83:0e:
a0:e2:1d:c0:1f:ee:98:d2:4c:83:c2:7a:fe:1f:6c:
76:98:79:42:95:51:31:ff:cf:2e:3e:77:fe:23:c5:
7f:55:01:a9:77:e1:e5:30:38:ae:27:16:3c:bf:8c:
10:bd:c7:27:17:6f:22:8b:ec:d8:78:4f:3d:ad:56:
52:9b:e3:e4:21:47:e1:e3:eb:ce:48:3b:8e:3f:76:
4e:4e:fa:6b:ae:6c:09:18:02:5e:8f:02:9e:90:b6:
c0:7a:54:05:93:be:91:e3:92:0d:47:cd:62:c3:74:
31:28:30:8e:f6:f6:6a:2b:5a:9d:b7:33:6c:a0:6e:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:5A:B1:A8:D2:1E:22:F0:9F:EC:32:9F:0A:EF:36:70:F9:E8:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fad8:1201::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c8:a1:4e:d3:bc:73:ea:5d:d9:bc:5d:a5:c5:e1:fa:be:91:
60:99:c2:ee:3f:08:48:3f:a5:2e:a0:13:f4:97:e2:15:94:c5:
20:8b:20:40:7d:de:63:19:25:35:d1:89:31:47:2f:fe:c8:9d:
ff:3e:0d:05:29:74:94:5e:5e:6c:b4:68:74:f4:62:b3:77:db:
45:e0:8b:24:f5:f3:52:60:bd:69:4f:8e:ed:bb:71:40:1d:20:
39:e7:60:ac:6c:0e:df:ab:9b:2d:ee:77:bf:21:38:9b:ad:f6:
2f:09:25:e0:8f:35:a7:6c:82:4b:31:60:f0:2c:79:20:b3:a7:
2f:f0:3a:9d:38:c4:8a:75:60:4d:48:d6:37:7a:e0:9e:08:d7:
c4:0e:e7:05:45:1e:03:ce:db:22:41:06:4a:53:57:b6:88:a5:
85:90:2e:da:7c:7a:24:7f:db:b7:0a:f4:be:df:06:d7:1c:d8:
b4:a2:e9:67:50:66:19:e7:55:bd:07:7e:fb:72:78:0e:d8:ec:
e7:5b:d6:9d:7f:f1:7d:fe:15:ef:bc:7d:8a:e0:35:92:ec:d9:
82:b0:80:71:a3:27:31:67:97:31:a4:94:6f:f1:22:e2:d9:d2:
ed:bc:03:e5:86:21:a5:c0:f3:83:c4:47:3d:e1:38:c5:f3:1f:
80:75:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:33 2025 by rpki-client