Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f31a0517-a6bb-37a1-8d18-bee86b07588f.roa
File: f31a0517-a6bb-37a1-8d18-bee86b07588f.roa (raw, json)
Hash identifier: uoWUmstCn1Y9K2O/hODO/5vRoPqMDQS6dtjEaiek3hk=
Subject key identifier: E8:E0:98:1F:2C:28:30:40:22:3F:85:B9:A0:55:49:23:D6:F6:53:15
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14F9562F29329CAD1E580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f31a0517-a6bb-37a1-8d18-bee86b07588f.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 2603:803d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4f:95:62:f2:93:29:ca:d1:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=702969b3-d948-402d-9bc0-c090ea664e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d9:42:52:b7:7a:2f:fe:48:dc:82:ca:02:ff:
7e:ec:c9:cc:7b:f2:0c:19:b1:dd:ea:f7:80:44:a9:
9d:a5:0f:0a:19:b0:7f:4a:87:8b:c7:1a:92:36:00:
e5:d5:f1:1c:f2:e3:54:1f:f4:aa:3e:c4:c7:cd:d8:
1e:04:18:d8:61:59:47:4b:20:48:c5:6d:c4:a3:7d:
00:02:6e:45:b9:ce:b6:68:86:fa:48:6e:e3:8e:c2:
cc:f5:f3:54:9d:76:f4:3f:75:0d:87:d7:3d:e9:9e:
78:a9:f0:fd:88:bc:91:3e:ad:0c:6d:9c:b8:07:71:
90:78:3b:5f:4c:c3:95:de:c1:47:b4:af:35:e2:73:
25:ca:dd:db:6c:5e:d6:1c:cf:e9:78:da:91:1d:26:
6b:d3:e1:d1:25:3b:dc:7b:4f:7b:70:f8:08:a8:71:
0f:f6:f1:b2:2b:eb:7f:37:fc:f3:7d:99:72:5b:20:
c4:fa:73:2f:de:ef:36:d7:20:d4:ad:0b:98:d6:d3:
97:2d:0a:cd:81:c8:29:26:76:e8:98:b6:0e:a8:bb:
f0:62:86:1e:8e:76:12:75:7a:85:7a:34:78:82:2a:
17:51:a4:f7:52:93:02:d9:6e:da:25:df:a7:18:bd:
17:3b:48:ef:a6:91:78:24:4e:8f:24:a9:e8:56:ef:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:98:1F:2C:28:30:40:22:3F:85:B9:A0:55:49:23:D6:F6:53:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f31a0517-a6bb-37a1-8d18-bee86b07588f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:803d::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a8:bd:4a:80:e2:4c:cc:6c:24:58:4c:ae:8a:fc:cc:bf:51:
6e:fb:f1:64:e4:13:d7:1f:f9:49:5d:d2:4f:9d:0e:6c:6f:4d:
03:b6:01:a5:a8:a6:82:10:4c:f5:23:81:8c:ef:79:ff:4c:51:
06:2e:2f:7b:7a:98:4c:1f:e3:30:9e:f2:84:50:7c:fa:e7:c9:
1c:3e:fd:91:39:b4:59:b5:9c:52:05:96:40:3b:16:da:b9:da:
2c:78:e9:70:f5:e2:79:26:b8:56:ea:cc:56:93:4a:95:43:ba:
55:c7:1b:bf:2d:2c:2f:c8:29:9b:61:c7:5f:d1:ea:ae:b5:43:
bd:58:98:f4:8d:e8:19:50:5a:57:1d:bd:83:c1:46:e0:85:3d:
a1:03:3a:10:96:a3:f3:7a:20:be:e4:7d:00:d0:7b:ca:7b:6a:
d7:bc:04:bd:c9:f9:7b:84:35:10:1b:12:c6:ee:c9:68:5b:7f:
9c:09:a7:e4:79:c3:3c:23:f2:ce:c0:99:9e:1e:d3:10:dd:1e:
c0:10:c0:39:3c:cd:77:2c:be:b3:4c:2c:27:4e:cc:a3:77:9c:
cd:7c:79:6c:be:85:a3:5f:4f:10:d9:ea:4c:bb:fe:5f:a1:77:
df:e5:c3:80:ab:fd:41:b5:1c:df:aa:08:47:44:67:4b:79:0f:
79:bd:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:31:40 2025 by rpki-client