Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/e4b8240e-d81c-3315-8a86-aa6c0b0ebcf5.roa
File: e4b8240e-d81c-3315-8a86-aa6c0b0ebcf5.roa (raw, json)
Hash identifier: D9Jz5w1WtTZ65WT3dYztyXem+EXIkmPFaVQdHGQSmjQ=
Subject key identifier: 0D:7D:04:E6:26:39:97:60:99:11:9F:0F:6C:E6:06:80:6B:A5:45:87
Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial: 010D0C9F432858492CB21F77F5F30890613A0E00
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/e4b8240e-d81c-3315-8a86-aa6c0b0ebcf5.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 6461
IP address blocks: 2620:a0:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:1f:77:f5:f3:08:90:61:3a:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=45386e77-551a-439a-9cb2-d4d8110ef4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:02:db:c6:6e:b8:f8:76:cd:85:0a:5b:dd:
5f:5a:00:79:e6:87:62:9e:4d:bb:1b:6f:02:da:0c:
5d:f4:6c:d4:79:98:a7:2d:8f:9b:2b:d8:20:83:04:
df:e7:b5:4e:ba:4d:4c:cb:9b:2b:41:d0:88:cf:fc:
15:c9:71:60:ac:20:8a:ae:ce:81:56:53:7c:c8:1e:
57:28:a3:ab:9a:09:97:62:6d:10:4a:2a:29:77:90:
e2:de:23:78:f2:47:cd:b4:be:4c:32:03:f8:7e:73:
0f:96:4e:e8:5f:b8:74:f4:4a:56:a8:8d:ed:bd:cc:
1f:f7:8e:ba:7f:ab:30:a3:d2:3c:3a:b2:5b:cd:6f:
b1:d0:14:9b:3c:48:84:35:08:41:86:7d:83:d3:3e:
49:a4:a4:eb:ef:7b:7a:6b:56:ae:14:1a:79:62:d1:
37:cc:4d:28:46:4c:26:02:4c:a2:7d:a9:af:e5:0f:
8d:d0:4c:cc:99:59:89:23:03:1a:ed:50:7e:d9:7c:
d1:a1:ec:0a:26:a5:39:70:11:68:d3:10:fb:c6:b7:
43:32:4d:02:c4:e9:76:ff:9f:e1:b6:3e:28:6f:bf:
9f:c8:31:3e:5b:7c:a4:9f:99:5d:25:b5:13:9b:6c:
54:54:b1:38:2c:55:3c:fa:4c:12:bd:00:37:6d:f1:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:04:E6:26:39:97:60:99:11:9F:0F:6C:E6:06:80:6B:A5:45:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/e4b8240e-d81c-3315-8a86-aa6c0b0ebcf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
X509v3 Authority Key Identifier:
keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:a0:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f9:fd:ab:5c:84:56:3f:6e:a4:61:d5:da:ad:47:36:eb:ad:
e4:76:12:89:2d:d7:bf:49:69:9a:db:cb:ca:f9:10:99:b0:8b:
a6:18:db:a3:be:f9:ec:43:fc:0c:59:d5:5e:8c:c4:4c:2f:8d:
03:8f:ed:a0:52:70:8d:3e:11:f1:5a:c5:fd:9e:5c:1d:7d:88:
8a:0b:6c:0b:26:3b:35:69:b4:80:bf:ca:6e:63:8d:42:14:ff:
6f:56:ea:f0:83:28:05:60:91:a0:bb:ad:20:29:46:c4:f7:a6:
16:97:d9:93:59:83:b2:83:b8:f0:41:88:ee:d9:61:d9:f3:e0:
d1:20:1f:a5:f9:75:c0:d6:17:1b:67:a4:81:62:e3:ca:c2:4b:
5e:dd:d6:03:aa:ad:10:73:81:18:bd:aa:59:2f:f8:c6:f5:c1:
9c:f6:22:10:18:44:9f:a5:11:ac:f7:f7:36:38:34:01:14:ef:
0f:0a:a7:06:60:08:38:33:b5:78:ae:a9:ed:24:44:1c:ab:c3:
b2:48:0e:50:a7:12:a5:d9:56:08:80:44:59:6c:ab:c9:7e:43:
a0:78:1b:fe:72:90:3a:cb:05:77:58:5d:94:a8:b0:68:08:39:
37:8c:1b:e5:4c:62:ff:fd:2b:ac:dd:d3:e4:ea:7f:76:98:97:
bb:59:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:00 2025 by rpki-client