Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d04c4fd-2e10-31fb-aaf7-9ceed58a44b8.roa
File: 5d04c4fd-2e10-31fb-aaf7-9ceed58a44b8.roa (raw, json)
Hash identifier: Rx37SESlFWk1bjhz16fDC2GSKn7mj1YRYb0GPYvC2i8=
Subject key identifier: 1F:6D:51:60:B6:61:5D:76:02:09:B6:11:17:9D:1C:57:BB:04:87:6C
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B5F770BEB86B787A0E700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d04c4fd-2e10-31fb-aaf7-9ceed58a44b8.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 852
IP address blocks: 2001:56a:810c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:5f:77:0b:eb:86:b7:87:a0:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=5f42fb50-496c-4303-9449-b668970c0fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:dc:5f:a1:50:ab:eb:05:da:79:d8:e2:6f:
da:d9:04:b8:3e:84:79:d0:e6:e7:6d:2b:0e:f0:7f:
b1:0f:c2:47:82:b4:bc:6d:c5:02:06:85:eb:e8:f0:
3b:22:f8:66:71:2f:bf:84:c9:d4:df:f7:ca:c8:f2:
23:7b:f3:94:f6:87:6b:e8:e2:55:75:70:39:99:08:
30:50:b5:a2:7b:02:c9:68:7e:31:6a:28:25:fc:6e:
d7:5f:e1:17:67:09:8e:57:af:36:fa:67:fd:14:d5:
73:0d:b9:db:d7:17:4e:f7:59:03:3d:67:87:97:8b:
1f:f4:86:b3:3a:cd:98:20:7e:74:19:88:2b:6e:8e:
c2:3f:54:e4:57:1c:6b:45:f4:cc:fc:fa:92:cd:3f:
6b:3a:67:1d:c2:a3:8f:57:0a:40:9a:51:25:b2:0d:
42:ba:f0:84:9c:2d:57:a3:fb:b1:8b:43:54:c6:05:
04:58:06:8d:70:87:91:a9:34:5a:fe:a0:78:63:6e:
02:f0:b1:64:c2:3d:88:8d:6a:8b:93:88:fd:f0:dd:
4a:00:a9:ef:be:1e:bd:21:01:a9:94:7d:a8:d7:1b:
4c:4c:9b:aa:8a:ab:0e:55:fa:a4:bc:48:cb:d4:24:
e2:87:2a:18:d7:15:de:08:87:5f:96:7a:17:9b:27:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6D:51:60:B6:61:5D:76:02:09:B6:11:17:9D:1C:57:BB:04:87:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d04c4fd-2e10-31fb-aaf7-9ceed58a44b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:56a:810c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:31:b5:15:93:93:84:63:e4:12:1d:03:c6:07:6d:6e:64:86:
9f:db:20:91:d5:55:49:c4:cb:4f:db:47:af:66:6a:be:1f:cc:
4c:2a:0d:25:73:3a:ce:78:29:bb:fa:f0:3a:ed:86:6b:ec:8e:
cd:b9:ce:21:0e:7c:c5:06:b0:d9:d2:4f:8d:87:eb:67:61:7b:
1c:65:bf:5e:11:7d:7e:e0:55:7d:11:3c:6a:44:15:2e:0b:89:
4e:63:0d:12:19:50:7f:5f:11:94:ec:04:7c:93:f0:88:12:86:
a0:cb:65:00:12:be:fb:c4:72:00:89:ea:1d:60:3d:9c:ad:a5:
21:b2:9d:8b:6f:20:d2:19:9e:1a:b3:dd:bf:24:65:57:45:c6:
18:0b:3f:5f:2d:0c:26:89:99:7e:a2:43:8a:db:7a:39:db:88:
a5:c9:b6:88:b9:86:55:34:4e:cc:f1:12:1e:37:6f:ec:65:87:
72:a7:cc:89:15:a4:1b:0c:0d:a8:00:97:a2:0e:7f:46:3c:f1:
ad:fd:44:cc:ce:1a:03:b3:75:53:9d:ef:5f:9a:00:fb:a9:93:
53:8f:46:70:25:05:ba:1b:9c:a3:2b:d2:c7:73:58:ba:ef:1a:
a9:9c:99:fc:4e:64:69:fd:56:50:68:33:2f:1b:bb:78:d7:91:
d0:36:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:03 2025 by rpki-client