Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e9a0dd-4b52-30be-84d0-4176867abbc8.roa
File: a1e9a0dd-4b52-30be-84d0-4176867abbc8.roa (raw, json)
Hash identifier: C05IQL6o5mW+nIcd8iMnoCgOxRDKHvTC9QE+wHQv9Rw=
Subject key identifier: C7:0E:1D:D4:7D:7F:24:FC:BE:55:AA:8E:36:4F:6B:4E:F4:87:AE:B6
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858494B40209DB5D23D0D898D6600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e9a0dd-4b52-30be-84d0-4176867abbc8.roa
Signing time: Mon 24 Mar 2025 11:48:40 +0000
ROA not before: Mon 24 Mar 2025 11:48:40 +0000
ROA not after: Sun 22 Jun 2025 11:48:40 +0000
asID: 22773
IP address blocks: 2001:579:18b8::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:40:20:9d:b5:d2:3d:0d:89:8d:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 24 11:48:40 2025 GMT
Not After : Jun 22 11:48:40 2025 GMT
Subject: CN=d583ff2c-5f1a-4ec3-a3a4-02e436334ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:3b:40:27:a9:7f:e9:6e:af:cb:61:ee:0e:
7b:12:f0:07:f6:18:3f:d1:b4:32:60:a3:2d:e6:01:
6b:f1:19:6e:07:bf:74:6f:1c:5f:83:c7:e3:e1:38:
ca:20:e8:70:f7:06:75:5a:bf:37:39:48:21:57:d7:
ca:6c:0e:ea:e3:84:68:88:8d:19:79:f4:37:56:bf:
c4:7e:c7:65:63:37:b7:9d:78:e8:41:2c:fa:52:76:
c3:ac:75:b9:24:f0:69:eb:ac:be:41:b5:15:1b:ef:
c3:45:71:61:14:bd:d1:5f:56:fb:c3:1a:f5:51:0e:
f4:4b:84:5f:46:37:1e:26:36:72:90:a8:16:8d:c1:
48:34:9a:cc:94:c2:f8:09:f6:3e:2a:a1:e5:51:8d:
3a:52:10:d3:9c:77:3f:06:8d:2c:ff:5e:aa:ad:fe:
7e:ab:12:b9:31:b8:ce:57:c8:de:44:53:6d:d6:c3:
89:be:ef:1c:94:19:c1:8a:ae:de:b0:9e:1a:c4:8f:
7d:9e:2f:c1:d3:36:6b:fe:d7:22:69:11:ba:65:8d:
ca:c4:c9:44:8f:94:ca:c8:32:2a:04:79:b9:01:c3:
86:09:31:bc:62:e8:8e:9c:a5:7d:2e:09:37:b5:d1:
bf:47:d8:86:cc:46:0d:9f:71:c1:2a:9d:95:8c:5e:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0E:1D:D4:7D:7F:24:FC:BE:55:AA:8E:36:4F:6B:4E:F4:87:AE:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e9a0dd-4b52-30be-84d0-4176867abbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:579:18b8::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:89:18:10:36:f4:61:f3:e3:bb:de:60:23:b3:c6:54:e2:1f:
52:db:8e:80:75:3e:75:5e:a7:5d:30:3b:33:ed:37:35:1e:f4:
fd:31:05:86:7f:0b:4a:c8:4c:e6:94:fc:91:2b:ba:d2:a0:fa:
76:7b:f5:93:59:2d:bb:df:ad:2f:bb:5f:28:cf:55:4b:b8:42:
42:a6:74:a2:cc:53:ff:27:b3:f1:a1:9a:d2:2d:d0:e3:08:aa:
23:d7:76:b6:70:45:27:9d:73:aa:ee:d5:e2:a5:ab:fc:e8:a0:
72:ff:71:b3:8d:9d:60:75:48:53:63:1d:c9:0c:d1:d4:7f:5b:
9c:f0:4d:4b:75:7d:6d:cf:69:d3:8e:3b:59:bb:00:a5:1f:a0:
e8:3e:f5:0b:24:2c:df:2c:4f:9e:1d:37:2d:e5:65:32:cc:45:
aa:37:72:a5:b5:63:7e:4e:21:fe:d7:66:8b:16:0a:c2:08:c6:
37:c3:bf:e3:40:ec:b2:01:f1:07:13:f8:7c:e8:4e:d1:d4:55:
4c:b9:ad:3e:a8:c7:3c:15:0f:f2:87:be:94:ab:1d:cd:49:ec:
0e:c9:69:88:32:0d:49:47:cf:62:4f:73:b3:92:72:c1:c1:7e:
58:8a:36:06:9f:5a:99:ea:cc:f7:0b:23:63:7f:c3:ee:72:d0:
f3:99:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:57:58 2025 by rpki-client