Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/74302747-5412-370f-9087-ecab7b9ff995.roa
File: 74302747-5412-370f-9087-ecab7b9ff995.roa (raw, json)
Hash identifier: A2wLHoOqrHGx/nhGgo97iAUmKanbn78BllwHEx4MEu4=
Subject key identifier: BF:0E:1F:AB:5E:F0:7D:66:E3:15:4D:A0:6D:44:BE:5B:42:65:E8:28
Certificate issuer: /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial: 010D0C9F43285849203C15D0B806A612D96BDE40
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/74302747-5412-370f-9087-ecab7b9ff995.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 22363
IP address blocks: 2607:bc40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:15:d0:b8:06:a6:12:d9:6b:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=fa44edb3-2758-40e0-8066-6f63be259f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:d6:8e:5a:c9:ec:32:15:57:12:f0:6b:c3:
bd:47:93:cb:98:b0:14:6f:89:5a:25:32:d1:d3:38:
31:87:4b:11:cd:26:da:83:46:03:3b:c5:4e:36:1c:
ce:df:fb:48:af:b7:62:89:7d:68:b0:eb:8a:bf:d6:
16:75:ea:03:28:a5:95:b1:58:fe:8b:81:2e:49:e6:
05:ed:d4:fd:f7:cf:de:ba:5f:c4:fb:09:00:f4:63:
27:f9:45:6d:8a:6b:58:5c:44:d7:74:ca:ec:8f:8b:
09:32:cf:10:95:1b:67:46:1c:33:d7:41:ba:10:dd:
c7:e5:a9:77:3e:20:4a:dd:ea:f3:46:b3:7a:5f:b7:
3a:06:ba:81:b3:4c:90:ac:2e:07:c0:7f:19:d9:df:
d9:0b:6b:b4:4c:a7:42:cc:e1:21:78:d8:38:7e:4e:
a0:20:d0:6a:fc:cd:a8:b7:35:b0:87:a2:6c:bc:80:
b6:31:ac:ea:4a:78:6b:ed:39:bc:f2:11:d7:98:28:
94:10:62:fa:eb:8e:55:e1:a6:61:a0:42:85:84:a7:
b4:dd:66:66:04:9c:d4:82:6f:ac:71:a5:a7:e8:74:
56:2c:3f:5e:8c:b6:94:9e:43:7c:d4:78:19:32:55:
a3:e5:35:69:47:a7:4d:ab:bd:3e:e4:a9:4f:11:3c:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:1F:AB:5E:F0:7D:66:E3:15:4D:A0:6D:44:BE:5B:42:65:E8:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/74302747-5412-370f-9087-ecab7b9ff995.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
X509v3 Authority Key Identifier:
keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:bc40::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:85:f8:8f:0f:14:d8:6e:dd:c2:43:76:d8:99:ab:a6:4b:41:
72:95:7e:e0:ac:80:fd:a6:89:3f:98:46:5b:43:54:ee:61:e0:
10:57:2a:fb:da:bc:97:c7:57:79:5b:00:30:8b:74:1b:43:36:
29:5c:e5:ba:ab:29:b1:8d:38:43:26:fc:38:52:9c:a0:4a:c3:
b0:61:ff:de:97:9e:b0:14:b2:0f:c5:0d:7e:33:8c:63:e4:1b:
5f:bf:5f:aa:0c:15:99:12:dd:d4:77:80:68:de:98:2d:96:b5:
3b:ef:53:0e:1c:1a:20:30:b4:3b:0d:16:95:4b:f6:58:e5:48:
c7:38:1a:79:b0:0e:5b:0e:95:ef:ec:fe:bc:19:b8:a9:c8:e4:
b1:49:28:c2:d3:d3:49:fc:8f:f7:5f:ac:d8:2f:2d:b3:ad:54:
44:e0:01:7a:f4:b8:0d:a1:b2:ef:4e:6c:2d:94:7c:33:dc:06:
9b:29:d6:bc:9a:b5:b0:8e:64:9d:6f:75:aa:9f:3b:a6:57:71:
16:b6:6f:f3:d7:ba:ae:7e:c9:38:a2:86:9a:30:be:29:41:3e:
05:21:73:15:a5:83:b1:e9:4e:b1:db:47:a0:d8:b4:50:c3:d6:
97:7a:70:5d:d8:ed:19:ef:02:a8:84:69:fc:eb:fe:3b:96:05:
46:30:e7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:37 2025 by rpki-client