Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
File: aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa (raw, json)
Hash identifier: aSmW/y0qovkCv1yiBNKRj5s7UOaQ3xOtj+ZrLFViSfc=
Subject key identifier: 4D:27:D2:DC:CE:02:ED:84:30:D8:D6:0F:1C:24:C1:EC:59:C5:15:0A
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848D7A657A61AB15A1C851055A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 400040
IP address blocks: 2001:438:fffe:e::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:57:a6:1a:b1:5a:1c:85:10:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=42e1a631-c610-4584-98eb-6eb2780e9038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:56:78:29:84:7f:16:50:28:b2:90:31:80:
be:fe:cf:64:b8:bc:b2:26:36:77:30:34:59:60:57:
20:8f:88:7e:52:47:1e:23:c3:2d:87:88:f9:34:1e:
e4:88:c2:4b:76:4a:01:9a:d2:87:df:54:65:45:38:
f4:b7:43:71:ec:a2:09:0b:5f:09:69:a8:cd:30:a2:
93:52:d4:f9:dc:ae:0c:84:f7:0c:86:f7:c4:79:59:
89:d3:55:7b:46:8c:ab:6d:8a:1a:d6:be:e1:43:d9:
62:74:44:eb:f1:ed:38:56:e5:0d:19:10:ab:21:5b:
ac:c6:e8:37:c5:d0:5c:c6:55:3f:2c:4f:62:ba:52:
63:48:96:f7:3f:b3:f2:34:c2:e1:fa:12:24:2e:b3:
c0:76:e6:1e:df:25:14:c6:7c:fc:bd:9a:b3:67:ff:
30:e6:65:3b:23:63:7a:7a:60:09:ff:2b:e5:ad:85:
5a:dc:5d:47:65:81:9e:c0:01:f6:ad:7b:04:6e:73:
51:a8:a6:fd:1f:31:62:31:7c:7a:c7:5f:34:35:49:
27:11:ea:15:e2:b7:29:e8:51:c8:96:4f:61:61:c6:
b3:7f:13:5e:b3:40:a0:b3:80:5b:e3:33:c0:c3:19:
2a:4b:ba:9d:da:77:5c:c9:bb:77:6b:94:b6:18:7e:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:D2:DC:CE:02:ED:84:30:D8:D6:0F:1C:24:C1:EC:59:C5:15:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:438:fffe:e::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:8e:67:b6:ae:21:75:f0:0d:bd:50:7b:e7:89:d0:75:fc:e6:
07:fd:34:e6:8b:aa:30:1b:7f:df:05:62:ed:b1:0e:5a:13:46:
0f:63:d2:e7:fb:52:0b:58:7d:4a:b6:b7:1a:34:f4:0a:25:18:
b5:cd:3b:c8:25:76:39:d0:00:9e:94:5c:5a:ea:62:74:0c:c1:
0a:e8:c8:a5:e9:4a:87:c4:82:51:64:a6:b7:48:53:29:4f:09:
91:fc:b8:ca:0f:f6:90:99:7c:c8:41:e2:e3:7a:d5:a8:b5:91:
0d:a6:ba:14:9a:eb:6b:8f:bf:7c:35:ea:a2:55:c9:18:ea:de:
bb:46:29:1c:20:5a:24:04:5e:d1:ff:09:11:90:63:fd:ff:40:
0f:2e:19:7a:d3:31:d4:92:4c:74:23:47:ce:1b:b1:75:4d:98:
1f:36:2f:37:98:6f:78:a9:c0:f9:fa:6f:97:7e:14:16:11:96:
2d:b2:95:55:3e:ba:8a:d8:88:c1:b4:b2:46:ee:db:2a:5c:3e:
7b:8e:f0:c3:8b:fc:68:05:e8:94:f5:43:f1:b2:93:b1:eb:b3:
3b:52:07:72:69:15:43:1b:f3:46:2a:ad:11:99:06:b8:91:51:
aa:a6:15:0e:b1:1d:06:b4:6c:2e:fa:1c:1b:46:86:2b:34:ed:
17:bb:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:37:45 2025 by rpki-client