Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa
File: 23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa (raw, json)
Hash identifier: kawgb+4ki6wOu/kFGslaIOtzU+n5yVjKEsed83cyht0=
Subject key identifier: 81:7C:32:D6:54:4C:77:42:8D:5B:FE:85:C9:51:A4:B1:51:BA:63:9E
Certificate issuer: /CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02
Certificate serial: 010D0C9F43285849002169A8C20E1A82FCF78FC0
Authority key identifier: 1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 14532
IP address blocks: 2607:abc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:69:a8:c2:0e:1a:82:fc:f7:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=104a06f1-4a5b-4e65-9f00-9978643f6839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:65:ad:db:aa:12:18:0d:da:1f:59:ae:a3:
42:df:9c:5e:52:79:95:50:1b:a0:04:e0:8f:e7:0c:
a2:64:7f:4e:4d:06:79:22:33:82:f1:32:f5:9a:31:
3c:0a:64:90:69:7d:83:96:69:f8:a3:4e:b4:88:db:
9b:bc:43:e4:0f:84:32:60:a4:de:97:d7:f7:4b:de:
d9:78:d6:8a:69:09:b6:9b:57:b6:ac:76:da:0e:2d:
52:7f:5a:5c:d7:6a:85:7d:91:96:b1:b1:32:e1:4d:
ca:9b:df:77:3e:32:38:84:52:40:3f:39:6c:c2:38:
16:46:3e:83:3b:66:d5:b9:b9:9b:07:36:46:83:1a:
da:37:a9:cd:be:d3:29:36:6b:0b:a3:37:ee:bd:67:
ec:ee:ed:9e:41:86:2d:0e:7e:63:ff:1b:d2:54:de:
0f:61:e9:2c:30:4d:69:68:8f:8b:4a:c2:33:14:ae:
65:14:2a:d6:99:5b:46:0c:66:dd:af:01:25:5e:b7:
6a:2b:1b:dd:35:5a:1e:da:e0:80:76:99:07:ee:c6:
99:9d:53:65:2e:dd:b6:75:d1:2b:34:d9:99:5e:b7:
ad:d2:c4:1a:b4:24:d2:48:11:be:9a:ce:55:7e:32:
f0:cd:dd:f9:5d:6b:ae:21:1a:9b:c3:8f:cd:06:79:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7C:32:D6:54:4C:77:42:8D:5B:FE:85:C9:51:A4:B1:51:BA:63:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.crl
X509v3 Authority Key Identifier:
keyid:1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:abc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:e2:2d:95:db:b2:27:3c:93:bb:b5:a0:57:31:09:4d:0a:34:
73:a9:51:88:ca:b2:a2:5d:97:93:a5:d9:00:5a:e8:df:97:e4:
74:12:75:73:01:b5:ef:79:4f:1f:ba:69:4b:91:cf:5b:d4:4c:
eb:87:fc:7c:cb:0d:37:ee:41:78:58:89:9a:ae:8d:4d:93:b8:
7f:df:0d:77:9a:86:ea:18:a1:87:45:ad:49:54:a6:77:1c:3a:
f4:65:64:2f:c1:40:46:34:28:07:3e:2a:38:25:88:b9:be:21:
29:a6:e8:76:18:f8:8f:3c:20:71:24:44:ca:50:7b:45:c4:13:
39:83:c8:58:ff:4b:a1:1d:f8:af:38:a5:4b:ce:f6:6e:b0:50:
b3:51:6b:42:01:33:ef:f2:69:e9:ea:17:42:0c:4b:3e:dd:c2:
6a:16:b6:ba:80:4c:49:f6:b5:6a:b1:ec:ca:e4:d0:88:23:f3:
70:cf:a0:35:5a:a8:7a:18:e4:b9:17:d8:bd:da:7d:ab:97:f5:
b5:82:d2:6c:23:f7:a5:e7:4f:f0:c1:59:46:38:ef:9e:56:e9:
eb:a3:10:53:3e:80:f4:aa:03:69:21:3b:af:86:4b:8d:98:12:
af:58:58:c1:29:67:c5:79:b5:ad:8f:0b:78:64:a9:79:21:ed:
46:31:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:18 2025 by rpki-client