Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa
File: a9102b45-5600-3fb3-be81-4b0ef613577c.roa (raw, json)
Hash identifier: AbXAlPI5Wa2XIp5pleMmNbfb3Z/agHpHSM5jQoovvTM=
Subject key identifier: 72:D3:07:B0:14:98:AB:3B:3D:51:18:49:C3:8A:55:26:D5:F5:61:50
Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial: 010D0C9F43285848854B50B677BE1079926D5540
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 16787
IP address blocks: 2605:1c00:50f0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:50:b6:77:be:10:79:92:6d:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=9b7b6240-38eb-4496-9304-5995909bb0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:3a:04:a0:21:1f:23:35:c9:62:c8:7d:a6:
a4:89:9b:7a:bc:a9:c6:62:07:72:d5:82:bd:0f:a2:
89:c5:36:1e:be:ff:d8:9f:33:f3:85:aa:88:51:25:
cb:30:37:55:bf:b8:7f:b2:9c:69:83:53:3c:ed:40:
a3:40:12:20:e9:cb:b3:5c:ca:ee:ee:42:71:c3:b7:
b2:5c:6f:9e:2c:74:7f:49:1e:04:84:03:4a:13:96:
4e:0c:da:60:d8:4f:61:68:28:0d:30:d4:61:0e:20:
b2:df:91:82:b0:17:9c:f9:f8:7a:69:47:b7:83:89:
59:6b:39:87:f3:f7:0f:84:d2:60:03:7d:70:07:99:
ed:c5:fa:41:11:a4:41:72:62:68:ea:9a:11:69:82:
4d:87:5b:b2:5f:3b:9a:b1:64:86:a5:fa:22:9c:26:
81:a6:65:f9:c7:25:fd:d8:20:af:9e:81:a7:22:d2:
0d:0b:e9:92:28:55:b0:38:12:9c:0a:a9:97:26:d7:
74:d5:4d:2f:45:9d:55:57:6a:e5:6b:e8:8e:f5:83:
d3:05:3c:40:c4:6b:51:99:91:3b:4d:f1:5b:a3:80:
ad:51:5c:1a:39:fe:27:ac:15:44:09:b8:c9:47:38:
30:fe:ba:b1:d7:73:6b:64:40:14:e7:8d:06:7f:dd:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:07:B0:14:98:AB:3B:3D:51:18:49:C3:8A:55:26:D5:F5:61:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
X509v3 Authority Key Identifier:
keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:1c00:50f0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:5e:e0:5f:cd:73:8b:52:1a:e6:3c:66:ac:65:6e:8b:96:3a:
d0:d4:ec:b4:4b:5a:d9:c1:15:e1:2f:50:b9:55:9d:c1:a6:5c:
70:17:6c:83:4f:ae:bd:eb:70:82:7e:f3:1e:3e:7d:e0:9b:4e:
b1:69:79:52:93:71:45:22:5c:4e:b8:c4:c8:e3:a7:ce:ad:a8:
16:b5:7f:d4:fc:0a:a0:43:df:bc:2b:96:5b:81:5f:99:55:a4:
16:33:5f:2a:a4:00:14:9e:db:32:94:c3:40:59:46:41:95:74:
0d:7f:f4:80:ed:39:40:dc:45:af:a6:c7:d0:72:9d:4c:dd:38:
8b:cf:40:94:7a:af:bb:d2:82:91:66:43:1f:37:1c:42:bf:c2:
48:8e:93:ca:2a:a3:e7:03:7b:de:c8:88:5d:9e:6b:e2:f7:a5:
73:c0:7b:f2:ac:05:02:57:6c:f9:f2:c3:85:25:71:67:4c:52:
3e:61:a7:ba:af:ea:59:54:18:8d:1c:c3:ab:4f:68:79:94:70:
57:47:c3:c7:df:1d:38:3c:32:1e:7e:af:16:01:9c:49:5a:2f:
62:b0:78:7c:3a:09:e4:ea:13:5f:a3:5f:9d:19:6a:d0:d5:28:
36:21:a0:49:06:40:88:c9:a3:a2:15:21:54:25:42:87:48:2c:
f1:36:9c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:46:59 2025 by rpki-client