Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa
File: 27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa (raw, json)
Hash identifier: FgwTnw535Fct61U5rHYSQ+A8rlYnP4vTPnL7DxEud44=
Subject key identifier: 1D:60:C5:13:E9:F8:E9:8D:AD:CD:B1:2C:C9:D1:62:22:7D:B7:D6:90
Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd
Certificate serial: 010D0C9F432858490E16CC4D43F9B083E4958360
Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 3573
IP address blocks: 2610:b0:41d9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:cc:4d:43:f9:b0:83:e4:95:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=ca9a3475-cf66-43dc-b1a1-e1b7c3c5962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:03:c4:90:04:31:f1:46:e4:01:ae:fd:21:
cd:6a:4a:5e:bc:61:ba:5c:a0:87:6f:0d:65:6d:41:
c2:ca:ef:68:ae:86:fa:d9:84:52:0c:63:70:db:c2:
fc:d8:72:fe:7f:0d:89:47:81:cf:98:57:a3:c5:3a:
28:cc:e4:09:2e:b7:39:95:51:79:bb:c3:66:34:6d:
25:c4:1a:93:6d:28:0f:dc:64:ea:a3:b7:21:c0:06:
5c:fc:01:39:0d:ab:a9:a8:3e:b5:c8:1a:a6:ac:5f:
56:2c:40:3d:64:bc:f4:b1:79:8d:2b:e4:b4:2e:a5:
3a:b7:ab:62:69:2a:3d:2d:e2:27:a6:11:30:ab:8e:
10:05:9c:37:36:ca:de:71:a5:3a:f6:be:24:79:8b:
b2:96:ba:93:2b:62:c8:30:d7:a8:02:5f:a4:3d:88:
55:21:1b:24:f8:47:ac:6f:4c:ab:39:10:38:50:78:
8d:9e:66:80:90:a1:63:3c:e6:e6:01:01:61:6e:69:
5b:a0:9d:c0:9a:7a:08:74:50:69:87:cc:be:8c:2a:
6c:fa:32:b7:60:c3:e7:a0:a6:a8:b6:d0:0e:e8:43:
aa:5b:1d:f5:9d:0b:6c:b1:b2:9f:ba:5b:43:66:ff:
23:e8:a4:22:d9:c9:2e:e8:10:0e:e6:f2:96:a1:b7:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:60:C5:13:E9:F8:E9:8D:AD:CD:B1:2C:C9:D1:62:22:7D:B7:D6:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl
X509v3 Authority Key Identifier:
keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:b0:41d9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:af:43:7a:96:4f:fe:fd:49:ef:17:cd:c4:07:81:71:60:2a:
68:0d:d6:16:7d:3f:b9:a0:65:01:2d:67:54:2b:6c:cf:97:bb:
40:09:61:f0:55:aa:2d:5e:88:f1:b5:70:d9:31:62:2b:bd:68:
47:03:08:23:8f:e0:c5:7a:c2:e8:cb:7e:94:56:4b:8d:51:6c:
e5:90:d3:ad:88:80:62:a7:f2:08:78:d1:60:a9:d1:5e:01:68:
bb:6f:26:11:18:de:0b:ea:89:27:f1:5f:70:6b:a5:f2:5e:00:
7a:58:5f:3e:60:6c:a8:57:cb:35:61:e3:d6:57:b3:3b:64:e2:
d0:5e:d0:c1:e9:4a:0b:62:0a:ec:1a:b0:3c:87:37:89:57:d7:
26:6f:9c:d2:32:e2:46:ae:c4:40:f1:2b:a7:a7:9f:fe:db:c9:
9c:84:9a:98:d5:5d:d5:46:57:c9:66:58:7d:d9:2a:1f:45:a9:
ef:fe:07:5d:3c:e7:0b:e2:98:f0:01:b3:f7:e0:63:eb:c3:e4:
a1:01:da:ae:9e:6c:9d:de:ae:59:00:02:0f:cf:f8:7f:9e:47:
53:7a:77:94:2c:d4:70:ca:73:8f:6c:b7:1e:9f:11:db:87:d4:
a1:e9:b9:bc:81:50:e4:de:2d:b3:33:76:22:70:87:ee:24:25:
6b:f3:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:04 2025 by rpki-client