Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa
File: 127ddba2-8066-3325-85dc-986c65d82987.roa (raw, json)
Hash identifier: BWEsPj5P8Va+V//Pp9trIf4tzfGlHVidTPMAzdd6URE=
Subject key identifier: 42:82:72:03:A2:2B:CC:35:D3:0C:E2:5A:FD:8D:C8:69:FA:65:28:D2
Certificate issuer: /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial: 010D0C9F432858488AE0A28B1659EAE141474E80
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 32024
IP address blocks: 2607:69c0:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a2:8b:16:59:ea:e1:41:47:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=b986b6d8-969d-44f7-8a7f-412a269aadef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:81:16:94:e1:3a:1d:c1:b1:0a:75:c5:c4:
aa:ee:9e:93:ae:31:6f:97:df:5e:0a:c7:13:0f:e7:
f3:6a:56:19:68:42:5f:86:5b:13:db:73:1b:84:51:
b1:6b:f1:10:32:a0:35:ff:2a:7f:95:45:25:e9:cc:
13:45:2a:95:93:b7:c8:09:3c:4f:11:36:90:66:00:
24:48:07:ef:6c:cd:6b:8c:3d:6f:c7:ba:1f:8a:e3:
2a:31:ba:33:06:3e:2a:86:83:ae:7b:a5:1d:b5:2b:
eb:e7:f6:46:67:ce:5b:08:d5:0d:74:a1:2b:47:01:
fb:0a:f1:30:cc:69:5f:6e:a7:8b:bc:1d:df:1c:5c:
bc:81:22:c0:d8:73:27:00:44:6b:94:aa:d9:db:5b:
e1:8e:39:c7:32:67:f5:00:ec:46:01:ef:39:59:49:
38:1b:8a:5e:b2:6e:68:33:5d:e7:24:9f:87:c2:65:
a0:4d:d2:f4:50:7c:6f:60:90:3d:b3:da:a7:54:f2:
68:85:0a:0a:0c:99:38:ff:26:95:92:38:c7:be:3c:
79:6e:16:00:3c:eb:1e:ab:25:a5:68:47:f2:97:49:
59:ea:14:43:5b:d8:ee:db:0d:c6:f9:8a:82:b8:b6:
eb:0f:b8:e5:a5:44:31:21:75:e8:36:9f:6a:4a:dd:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:72:03:A2:2B:CC:35:D3:0C:E2:5A:FD:8D:C8:69:FA:65:28:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
X509v3 Authority Key Identifier:
keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:69c0:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:89:84:ca:c6:f8:81:d6:02:95:50:cd:50:3b:bc:07:b1:4b:
25:d0:46:f1:12:e5:c8:f4:9b:b6:fe:9d:00:71:61:4d:32:be:
6a:a2:a8:05:9e:b8:7d:f5:d2:f2:7c:fd:84:55:dd:6b:0a:d1:
6b:15:77:9c:e8:5e:cd:03:72:99:e9:c5:f9:0a:71:f4:18:3f:
e2:14:e4:d8:94:c8:4f:ce:9a:72:f5:28:43:ac:37:54:de:b3:
a6:ff:98:82:1d:71:de:a6:8a:61:55:9e:69:f0:08:8f:99:9c:
10:3f:0b:7d:59:68:4d:44:5d:fa:4a:bc:34:4d:d9:a5:9b:e9:
e9:a9:ad:1b:16:4d:dd:17:53:49:f9:99:da:70:1e:62:3f:29:
73:b8:65:20:8d:94:6c:f4:32:9d:3a:85:62:e5:3c:8c:74:e5:
51:35:3c:5c:cd:c0:9d:4c:4f:ab:b2:50:29:df:89:a8:b6:c3:
99:b3:6e:da:33:05:29:79:86:e7:f4:49:9b:de:bf:51:3f:8a:
cc:4e:4d:0b:00:af:29:0b:65:e1:eb:79:b5:61:e4:63:96:13:
11:af:34:35:49:f3:0f:6a:a0:42:75:64:82:24:3a:1b:aa:96:
14:2b:3d:b1:a7:63:f2:15:f0:4d:f4:08:a8:86:bb:24:51:e2:
32:b3:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:29:26 2025 by rpki-client