Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
File: 28d9a954-6de6-3037-9560-f9bac3e99c3d.roa (raw, json)
Hash identifier: iLnvb1HdVQrXsNPN8dMfGJ5HO4xjDnibMQ6rsp+vOCo=
Subject key identifier: E9:91:F6:F3:5F:22:18:C2:B7:FB:DF:30:E1:B0:16:23:B1:0E:8F:40
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848F65BCF27B67F7A8F82155EC0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 30133
IP address blocks: 2001:500:65::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:cf:27:b6:7f:7a:8f:82:15:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=81cc9797-6ab0-4103-bc39-b8f5c913350b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:06:47:f5:02:81:95:fd:49:e4:7b:e5:7d:
55:fe:a5:26:50:c3:20:7a:23:01:dd:c1:43:7f:b5:
6e:4f:a0:c2:40:c7:f3:38:6a:b9:37:1e:53:39:22:
4c:c2:08:0b:8f:5e:4d:26:7a:9d:82:24:7a:26:10:
da:92:ab:6e:e8:e3:d3:cd:9e:0d:d5:6d:0c:88:6c:
d8:43:7a:f6:48:73:96:39:7b:91:5b:2d:6b:69:7b:
aa:d0:c0:87:f5:df:65:28:8b:cc:e9:1b:41:2a:08:
09:1d:cc:be:34:a3:51:ef:bb:df:0f:99:2b:55:c2:
e3:b3:6d:e9:01:0a:9e:11:30:a2:64:ed:87:1a:66:
3c:19:5a:96:78:b0:86:d6:27:57:1c:19:e1:68:28:
2c:27:ae:7e:de:7d:1d:7c:17:85:3d:55:15:5a:ec:
95:bf:e5:91:08:f8:33:92:2f:60:cd:13:48:8a:4d:
9e:50:a8:4b:e3:2e:ce:8c:85:ec:f0:93:ab:b0:ec:
23:0b:cb:0b:82:79:55:35:f1:5c:71:a0:9e:1e:ee:
49:39:43:84:40:86:29:55:87:fa:05:a0:7d:ae:37:
c1:90:16:d4:5c:e7:01:5d:34:76:23:c2:db:4a:78:
3b:da:4d:e4:fc:ab:33:78:36:82:05:1a:9e:f8:75:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:91:F6:F3:5F:22:18:C2:B7:FB:DF:30:E1:B0:16:23:B1:0E:8F:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:65::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:87:e5:02:cb:53:65:55:66:d7:58:ae:b1:54:1d:9e:d9:18:
1e:72:6a:1c:04:23:7c:82:58:c2:60:51:a7:f0:bd:3f:39:54:
3a:56:b6:89:7c:56:14:9e:e1:0d:2d:91:cc:eb:1c:cf:56:10:
03:2c:e2:1a:93:86:bd:8c:73:7a:85:85:9d:e8:5d:b7:e1:99:
58:d1:f0:d5:52:70:ef:29:b2:56:e1:0c:3a:f1:9a:df:9a:49:
57:44:d5:ae:8d:24:d8:7a:52:19:64:2f:ad:a5:39:15:cb:ee:
23:ad:07:69:ff:78:63:9a:e5:4b:0f:f7:f6:b9:ee:5a:3b:a6:
0c:18:65:33:f6:65:2f:bc:3d:e4:6d:f3:9b:6b:2d:31:76:fc:
f9:e2:85:21:95:a3:4a:a0:28:1e:e9:b3:8e:af:c5:ac:c8:2a:
fa:91:2c:e1:c6:6c:77:bc:23:93:e4:50:25:8f:b3:3d:66:34:
f1:48:1e:a2:59:bd:72:83:df:68:56:0b:a5:f8:99:c3:5b:7f:
33:11:cc:39:79:a1:ad:46:db:96:65:c5:0b:86:fa:3c:a2:73:
19:1c:46:4e:d0:12:b0:d7:b8:e8:01:ee:45:5f:eb:4e:60:6d:
a2:42:cd:92:6a:51:a2:11:28:82:e7:5e:ee:86:65:da:1d:03:
cd:09:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:20 2025 by rpki-client