Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7bf102-67fa-3b2b-a976-63932f1fac88.roa
File: 2d7bf102-67fa-3b2b-a976-63932f1fac88.roa (raw, json)
Hash identifier: ZEE6HyWdEUkrzoIjZhXDl2ss3S5OTm64p1pz2Pl3My4=
Subject key identifier: 81:13:7B:45:49:42:5E:AE:CD:C0:3D:5A:6C:11:0C:45:99:68:D7:DC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849244E8B4F89BE5084AB0007C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7bf102-67fa-3b2b-a976-63932f1fac88.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 22773
IP address blocks: 2001:578:1a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8b:4f:89:be:50:84:ab:00:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=e7d624e8-29e9-4467-8562-8a955bcfc3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:9a:c1:9a:d4:38:3b:20:09:db:2b:cc:1d:
bf:23:cb:ff:24:dc:5c:08:22:50:05:bd:64:da:2b:
09:ab:d2:ae:17:69:bb:bf:66:03:ad:e4:7a:1d:9c:
a6:c1:90:a4:8d:7e:d2:23:fb:17:24:0c:b1:d9:4a:
9e:cb:a6:ec:61:56:66:b1:0c:9a:d6:86:90:c4:a8:
24:22:98:5c:93:e7:94:e5:51:b0:ef:fc:7c:5e:d4:
c2:86:0e:b6:e7:58:57:f4:df:87:0d:bc:86:4c:7f:
0d:46:a4:b9:f6:b9:ba:12:82:88:eb:ee:c1:9e:a8:
78:23:f3:03:ae:d1:c6:a2:71:92:a9:cb:9b:7a:7c:
bf:4e:96:7e:c7:78:40:11:5b:52:c7:d4:d4:db:11:
44:73:30:d3:b0:de:87:e0:44:2f:dd:b5:ee:e0:16:
e7:bb:2d:be:bf:7b:d9:25:bd:4b:bd:b1:72:9a:7c:
19:e8:50:cb:50:0e:dc:d4:9d:45:f7:09:37:26:63:
a2:73:93:4f:5b:9a:88:0e:03:62:84:af:d4:cb:ae:
3a:56:86:1b:1a:65:f5:68:75:46:89:76:3b:cd:0d:
4a:39:d4:8e:d9:ca:05:00:08:1a:83:7e:31:38:b9:
89:bb:06:59:ea:e2:2e:fb:e0:06:e4:23:1f:43:0e:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:7B:45:49:42:5E:AE:CD:C0:3D:5A:6C:11:0C:45:99:68:D7:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7bf102-67fa-3b2b-a976-63932f1fac88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:578:1a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:fc:af:84:38:cd:ba:63:07:e3:83:62:13:84:7a:b8:56:8c:
c4:2f:3e:7d:fc:cc:4c:93:8e:23:0c:9f:31:8e:0e:a2:07:3c:
5d:ed:e2:68:38:fb:f0:0d:88:fb:a3:87:55:6c:f7:de:27:44:
55:d9:71:04:a5:38:3e:4e:2e:da:66:fb:e6:d8:99:d3:18:33:
c5:70:d0:ac:5b:b9:f7:24:70:71:8e:5f:02:63:7a:ba:6b:d2:
d9:da:67:03:ac:38:ca:9d:5b:06:5a:48:d5:ba:01:25:de:81:
fe:77:f6:eb:f2:68:a9:26:32:af:e0:44:1e:02:c3:76:12:24:
84:37:a2:b3:a8:6b:74:5f:71:ba:f4:4d:1b:4f:52:1b:a4:6e:
b3:be:bc:38:d9:b5:ff:50:b6:32:f0:7c:ff:31:26:f6:eb:31:
6d:6a:b1:40:d1:fb:43:61:9a:18:72:26:c0:51:9b:0d:3b:ce:
b6:2d:29:0d:fd:16:41:19:64:e1:e6:a4:47:5b:5b:88:fa:9a:
27:05:20:ae:de:21:d8:56:a7:85:15:0d:40:bb:72:82:1f:04:
02:40:7f:1d:29:5b:99:96:d7:90:65:b7:43:92:0f:5a:21:a5:
a5:c8:7b:e0:0d:f7:ac:bb:5a:25:82:a0:0a:9d:03:8b:3e:71:
f9:1a:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:04:56 2025 by rpki-client