Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa
File: 922fa9c7-bd18-3321-a549-97584b01d98d.roa (raw, json)
Hash identifier: 0OqPCR2Y7z+b0sGgzs4mNUuIx7KRxr9cIgNG9MlsBXQ=
Subject key identifier: CE:01:A1:BB:27:88:0B:D8:FF:6C:AE:7A:56:09:92:8D:12:B3:FB:65
Certificate issuer: /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial: 010D0C9F43285848FE1D57C99B117871E730A580
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa
Signing time: Mon 24 Feb 2025 20:41:20 +0000
ROA not before: Mon 24 Feb 2025 20:41:20 +0000
ROA not after: Sun 25 May 2025 19:41:20 +0000
asID: 396982
IP address blocks: 2607:1c0:1320::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fe:1d:57:c9:9b:11:78:71:e7:30:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Validity
Not Before: Feb 24 20:41:20 2025 GMT
Not After : May 25 19:41:20 2025 GMT
Subject: CN=b27f5440-24ea-44eb-bbcb-c00546e10f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:b0:e3:60:4d:08:1c:4b:a4:e6:42:5d:86:
24:82:81:fd:c8:66:5d:48:a8:bf:44:f8:9a:45:e2:
ae:ee:40:a1:5e:b1:75:91:48:2f:a5:53:7e:fa:c2:
41:da:12:77:5e:e7:51:6a:c1:b4:f6:5d:c2:53:03:
e7:fd:c3:6e:5e:ca:75:a0:94:18:ba:f1:d7:06:28:
b1:50:91:62:00:34:1a:32:eb:f7:94:3f:ff:ed:df:
74:b6:8a:13:f4:4f:36:f6:30:53:4a:b1:ec:e2:c3:
a2:46:2b:79:b9:b5:cf:f7:c0:64:a0:bf:2a:93:45:
51:b0:57:32:6f:ef:88:69:ed:de:67:c4:91:3c:c7:
8f:de:54:6b:b9:48:f9:f6:d3:75:00:0d:30:7f:e1:
50:9a:a9:23:9b:30:02:cd:c2:4e:83:40:94:df:21:
50:a6:d0:0d:4c:6b:dc:2f:bf:65:ce:49:34:7e:1b:
f8:30:03:31:db:15:7b:d3:e9:84:76:a7:4e:49:2a:
7a:9e:24:aa:63:bd:01:37:f2:a3:16:d2:49:83:0d:
39:15:33:31:3a:85:68:92:28:41:30:39:4a:cf:76:
3f:03:52:d8:dc:ce:7f:77:14:52:60:d0:71:e1:4c:
a0:ee:33:47:22:fe:fa:e7:d2:d9:09:c1:e0:e4:8c:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:01:A1:BB:27:88:0B:D8:FF:6C:AE:7A:56:09:92:8D:12:B3:FB:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
X509v3 Authority Key Identifier:
keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:1c0:1320::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:de:45:8f:ca:13:d2:17:0b:2d:7c:0e:58:8c:c9:80:b5:e6:
20:17:39:c1:68:08:29:3a:05:09:4b:94:91:95:8f:d0:a8:f4:
bb:a5:89:e1:59:45:43:ae:12:af:76:bd:29:ad:89:03:03:0d:
bb:50:cc:bf:91:36:6e:be:5f:1e:f0:06:99:82:f1:23:81:81:
d1:a6:32:ca:c7:af:e9:4b:8a:a1:93:86:f9:e4:4a:ea:d6:74:
71:69:4d:38:26:9d:e0:f1:f7:5c:b3:6f:d2:e6:34:ae:f8:07:
10:f2:2f:39:8e:6e:05:d5:29:fe:bb:6e:15:56:3c:74:fa:9d:
bb:9d:34:fb:c6:7e:05:bc:d9:b4:2e:16:ec:e4:df:76:40:8a:
f5:47:7d:9e:64:60:8d:09:4b:4a:a1:a4:98:9e:d2:90:fa:93:
5e:c7:e2:ef:ad:d1:42:d2:7c:c6:76:d2:6f:d0:d7:bc:63:71:
55:94:24:00:23:77:6a:4f:78:8f:a0:12:a3:8c:7d:2c:7b:2f:
89:1d:e3:55:6f:40:89:1f:c7:15:18:64:4a:b7:09:41:f6:68:
e7:0d:bc:00:85:ff:71:5f:3e:e7:97:1b:cb:95:f1:1f:fc:3f:
c9:03:73:af:c0:cc:b0:e2:69:05:36:b9:c5:06:06:7c:4d:17:
30:b0:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:44 2025 by rpki-client