Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
File: 00815a99-a458-3091-a374-a6e5d843be86.roa (raw, json)
Hash identifier: CnzKnmdwRi9pTry3Qiz3RZYSLHePxPwxwaldGCdlvhI=
Subject key identifier: FD:90:EA:2B:02:DB:97:7E:19:8C:08:07:5E:95:D8:2A:CF:BB:19:DF
Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial: 010D0C9F43285848B090B1505FD4A8DCE9BE7880
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 49
IP address blocks: 2610:20:6f97::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b1:50:5f:d4:a8:dc:e9:be:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=2f039283-cdfb-4caf-91f8-44007331e079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0b:50:68:e8:36:4c:f1:43:ab:14:a1:ef:e9:
51:73:32:83:28:e7:81:e3:6b:3f:00:86:94:a8:d1:
1e:dd:c0:08:d3:9c:51:75:d2:a8:31:6f:94:c9:43:
74:8a:37:21:9f:d5:b6:88:b9:44:63:01:45:0c:d2:
4b:65:4c:11:3f:99:4c:e4:15:d9:a2:8a:e3:0c:31:
03:50:92:80:e5:b3:84:86:2c:54:b1:e4:39:05:45:
46:82:ae:7f:eb:0a:66:d2:53:14:75:85:6b:eb:fe:
27:7f:8d:2f:99:b7:fb:48:de:51:16:8a:e6:ce:87:
65:b9:30:39:38:22:b6:44:48:ea:fa:e3:63:7d:0e:
2f:90:55:21:73:fd:28:c1:9e:35:d6:36:43:ed:a0:
d7:bf:cb:13:8e:e3:d6:fc:bf:a1:4e:24:96:0e:44:
51:04:35:4c:f5:a5:74:8c:00:07:0c:9e:48:5a:41:
38:5f:c7:3a:b6:09:d8:96:34:9f:55:9f:56:97:24:
a6:45:d6:de:89:85:ed:c9:6d:5f:0c:c9:c2:ab:a6:
4f:b2:d3:4b:1d:1f:36:2e:9a:09:46:78:38:40:b0:
bb:a1:33:23:ed:00:84:e7:f6:dd:2e:13:53:01:3b:
e1:52:f4:57:65:4d:92:da:d9:53:ab:65:7a:b0:a2:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:90:EA:2B:02:DB:97:7E:19:8C:08:07:5E:95:D8:2A:CF:BB:19:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
X509v3 Authority Key Identifier:
keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:6f97::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a9:a5:1f:41:7b:08:6c:88:45:f5:83:b3:42:14:d2:8c:5e:
59:e0:c6:8f:a4:6d:10:6c:58:e9:e4:d5:93:64:48:37:aa:11:
46:62:e5:87:a2:84:d4:67:6a:21:bc:13:79:e3:5c:75:1f:48:
ab:fb:5f:2a:5f:f1:75:31:05:23:23:6e:d1:57:ac:10:24:ef:
a3:6c:8f:d1:65:ca:a6:c1:38:47:8f:ab:d6:0c:9a:17:3b:d0:
52:4a:1d:9b:d8:8e:dd:d4:9e:a1:5c:02:f8:46:8f:d7:a5:e7:
be:5c:3f:ce:e4:38:50:12:5e:14:98:5a:f0:84:eb:de:6c:e6:
61:cc:42:96:a8:3d:62:a9:2a:36:8e:22:5e:03:cb:73:a7:97:
7d:1f:ef:39:0b:34:86:32:cd:c7:d0:21:07:84:53:7c:c1:0e:
13:d9:06:af:a7:44:f3:24:b1:95:7c:7e:35:89:29:09:99:5a:
03:44:d0:59:90:bf:ab:12:9a:53:d1:6c:4d:c4:1b:39:59:e2:
77:fe:78:f1:0b:b9:36:d0:f5:22:57:d2:33:b2:0c:de:53:81:
b7:6d:58:26:ff:ad:d7:49:28:d2:00:8d:78:5f:f0:d0:22:95:
1a:ee:e1:c5:49:f2:b7:39:53:b1:94:9a:cc:1f:a9:04:a7:48:
29:de:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:56 2025 by rpki-client