Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa
File: 05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa (raw, json)
Hash identifier: yTnkpzeqMe+rFbdFV5WK5bV+Ay3Y0cQKvJ8Wv2G9VEQ=
Subject key identifier: 31:0A:CA:9A:47:14:8E:9D:1C:87:D5:1C:4D:09:B2:AC:37:39:A1:F3
Certificate issuer: /CN=9531f556-030e-49b4-a31b-60b469425432
Certificate serial: 010D0C9F4328584902EC2C6418160275BB9F2380
Authority key identifier: 4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 8075
IP address blocks: 2620:bc:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2c:64:18:16:02:75:bb:9f:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9531f556-030e-49b4-a31b-60b469425432
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=8827e6fd-692d-474e-81e8-a366b394565d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:07:ad:3f:27:e3:f9:f6:8f:e5:0e:2f:03:
41:71:45:52:12:5c:f6:26:92:ff:33:5f:5b:e1:ec:
84:23:70:4f:b8:6f:3b:78:4d:08:87:05:f7:ae:80:
14:25:0b:ef:d4:b8:4d:f6:48:0d:f1:0b:58:09:db:
bc:1a:92:a2:32:c4:5e:29:30:c0:d4:02:45:af:6e:
10:02:6e:e2:d5:7e:0a:d9:38:ab:99:0c:b9:66:29:
a9:81:fc:6d:2b:09:13:7f:d9:d8:e0:be:c9:27:f7:
17:50:bc:ac:f1:b1:e9:d8:c1:ae:35:b2:bb:df:88:
2f:7f:e7:5a:84:9a:b5:90:54:ab:d2:38:47:b8:10:
c2:4b:25:6b:45:c8:77:4c:f2:19:6c:ad:20:a6:d1:
ad:bf:2d:d6:7f:c3:bf:3f:c7:63:25:56:1d:a8:e6:
3f:80:7a:64:1c:7e:0d:45:71:2c:8d:f3:e2:d3:67:
da:82:4c:78:a1:5c:63:66:89:75:f2:64:15:98:6a:
1b:bb:b6:ef:1b:fd:41:2c:74:f3:5b:32:cf:db:6f:
cf:9c:8c:e4:57:66:f6:11:f5:af:69:93:86:31:ff:
e9:f8:a8:8a:e0:c4:ff:5c:f6:9c:f9:d6:66:01:17:
c1:5e:4b:7d:87:18:ec:7e:63:3e:50:64:13:1c:10:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:CA:9A:47:14:8E:9D:1C:87:D5:1C:4D:09:B2:AC:37:39:A1:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl
X509v3 Authority Key Identifier:
keyid:4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:bc:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:26:a8:a9:87:0f:a5:57:9e:d0:50:5e:39:c6:b6:7f:d9:fb:
62:49:5b:f1:6b:4f:03:25:e7:54:57:12:89:53:d5:18:4d:de:
19:93:72:64:73:fb:2b:17:a1:7e:da:9c:2b:ef:9d:03:f0:ce:
ea:9d:c0:33:63:2e:af:21:1e:6f:29:65:1e:dd:c3:18:41:61:
c7:7e:12:de:30:68:5b:7b:e3:1c:2a:25:b4:db:e7:49:fb:71:
f6:51:c7:a9:fc:0e:ca:ad:60:4b:b2:29:28:6f:6e:fd:53:37:
69:bf:71:78:be:66:53:5f:14:4b:12:08:12:63:ca:0c:aa:1f:
90:13:ed:91:46:b4:8e:b3:a9:76:99:77:07:90:5e:18:9c:f5:
a2:78:cd:1b:8e:1f:6b:e8:4f:83:17:9b:08:a7:5f:9b:f2:ad:
c7:63:39:d5:da:7c:0d:45:02:b3:94:ad:f4:ef:39:99:06:fe:
39:4a:e3:11:b1:4f:f0:ab:d6:a6:c7:47:f4:9b:d4:0a:45:88:
90:e5:c6:3c:e4:f6:70:a1:2b:28:09:f7:b4:94:2b:3d:e6:af:
28:6e:2a:d9:eb:5b:37:20:35:ef:3e:a1:e5:72:15:4a:23:47:
f6:62:cf:36:61:b8:90:61:b5:81:f5:e2:8f:1c:2a:fb:8f:80:
3f:49:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:06:39 2025 by rpki-client