Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa
File: f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa (raw, json)
Hash identifier: brQbGcD0RrSoLkjZAq0KcaKNYVIQVwabn5t3ak7jEuU=
Subject key identifier: 41:43:94:2E:CD:F4:88:41:2D:4F:F4:E8:06:33:D3:A6:BD:81:22:77
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B626163FCE600E3B527E25A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 852
IP address blocks: 2001:569::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:16:3f:ce:60:0e:3b:52:7e:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=3137326c-c9a9-48c2-a4bb-fb507f02ef1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:d2:75:1f:ee:4f:ac:98:32:0a:6c:a7:5c:20:
bd:15:c5:ac:93:9d:7a:16:a9:e3:46:e6:18:59:a8:
8a:d1:ee:97:d4:02:c7:6f:f3:8a:76:8a:11:bf:ac:
95:92:5c:32:c4:78:1d:b8:91:07:35:85:d6:85:96:
53:2d:bb:1d:be:31:5d:42:bf:8a:7c:e9:e8:6c:3c:
09:59:53:b4:bb:48:69:34:a8:df:ec:8b:2d:71:f7:
54:3c:34:e3:57:b9:77:82:be:d4:e8:7a:44:5a:fa:
c1:d4:20:c6:22:6f:d5:3f:03:3f:cb:bf:ac:76:32:
51:d5:58:79:1c:e8:74:31:c9:15:18:1c:19:51:a5:
eb:04:23:dc:26:2f:5b:e8:1e:24:e1:9a:18:e5:6e:
b7:31:5b:06:94:94:87:95:0d:3a:f8:be:27:4c:fa:
38:b6:6c:0b:65:45:18:b9:a8:e3:67:50:59:17:1e:
15:1b:86:d2:89:d3:90:e2:a3:cd:e4:15:be:cd:62:
83:f4:26:ee:83:b1:d1:a3:bc:77:0c:89:87:24:b7:
60:5b:9a:bc:ef:0f:d7:4a:63:ce:2d:06:ad:20:79:
5c:41:99:35:11:96:39:b0:3b:fc:9a:89:91:61:00:
fb:a8:35:9f:d1:57:c1:42:e1:49:7f:c9:84:d8:68:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:43:94:2E:CD:F4:88:41:2D:4F:F4:E8:06:33:D3:A6:BD:81:22:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:569::/33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:00:30:d7:bc:61:e8:9a:ab:5f:11:5c:58:3f:47:a7:df:d1:
d9:bc:c0:36:f2:e5:15:b0:95:ad:ee:e4:9e:ad:73:0a:b2:e7:
da:82:e3:51:0d:df:90:e2:e0:dd:61:89:3e:5b:83:8c:01:5b:
fd:24:08:3b:11:d6:7b:5a:a7:90:c7:d7:38:c9:5e:b2:3f:18:
e6:4f:c4:fe:88:ea:40:5d:9c:70:81:bd:4a:dc:7b:ab:2c:68:
22:29:8c:99:e4:fb:2c:e3:b9:fc:3b:59:86:58:3f:d5:20:18:
0e:48:fa:b2:52:55:51:3f:64:4e:79:54:26:02:f0:bc:7c:61:
8c:32:67:9c:fc:bb:ae:46:79:ec:38:18:e2:bf:78:29:63:ac:
de:0d:e8:67:13:ce:f3:4b:a8:bd:aa:e3:9b:59:e3:78:9d:70:
a0:c0:94:18:f5:bb:84:0e:bd:e7:1a:65:9b:e3:b7:30:ac:10:
32:d7:8a:b6:fd:d6:bf:1d:97:52:57:75:3b:27:33:e1:f8:7a:
56:aa:a8:56:fc:9f:1a:28:84:76:cc:9a:b3:b4:84:1c:de:60:
b6:c7:76:d3:4a:52:a7:62:9f:0e:24:c9:8d:92:0b:2e:59:73:
63:2b:a1:2d:be:b3:a8:ee:60:f7:52:f0:b9:e6:ad:50:73:3d:
88:88:c0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:39 2025 by rpki-client