Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b8953638-2ec6-3d98-bd26-56ee6ccafc8e.roa
File: b8953638-2ec6-3d98-bd26-56ee6ccafc8e.roa (raw, json)
Hash identifier: igbHCH+r0Ws57jx2WiuxpS9/XUYKjO7xVrCTsH1hl9I=
Subject key identifier: 1C:18:11:3A:B9:94:22:18:FC:B7:5F:40:75:2A:E8:3A:08:60:92:F0
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848F4F68F54ABC8F6E6B7311A00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b8953638-2ec6-3d98-bd26-56ee6ccafc8e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33076
IP address blocks: 2001:500:78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:8f:54:ab:c8:f6:e6:b7:31:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=bfd12ec7-a35a-4256-822b-e306f01ca96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4b:0b:b9:50:fd:0a:ad:9a:0d:f2:d8:f8:75:
03:c8:75:1e:8c:da:65:d5:cc:f8:15:9e:97:9a:7c:
98:32:cc:f4:70:8f:e2:20:72:b9:19:48:14:15:65:
d4:54:5e:79:2e:dd:4b:36:ab:ed:6c:3a:36:da:36:
bd:a9:c0:d8:b2:60:72:5d:a2:d1:71:fd:51:21:7c:
b4:7c:fe:8f:6a:57:d2:94:c1:c5:7f:d0:52:0b:02:
02:cc:ea:e0:ea:6e:f3:65:d5:bc:cd:80:06:0d:a1:
fd:2b:80:02:8c:cf:e9:e1:b3:40:b4:63:44:c5:34:
40:99:62:b5:e2:c7:16:a2:8f:4b:f5:64:e1:58:cf:
e6:ba:68:3b:f3:07:d1:8e:e8:b2:c4:93:8d:99:48:
da:ae:b1:52:89:a6:21:07:f0:1d:6f:2d:a9:d3:2d:
77:2d:20:a1:b4:c2:aa:c3:20:81:71:8d:b6:fd:e3:
fd:60:bc:c5:46:d0:28:c8:eb:71:4b:74:39:9e:8b:
ed:ca:b0:be:48:1c:0c:8e:66:47:8a:d9:46:42:92:
0d:68:b4:8c:88:05:7d:9a:93:ca:28:39:78:f3:db:
47:9b:16:91:97:c0:16:07:fe:d2:14:d4:89:64:eb:
c5:f2:0b:98:2d:5e:41:bc:6d:be:c2:17:e2:94:28:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:18:11:3A:B9:94:22:18:FC:B7:5F:40:75:2A:E8:3A:08:60:92:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b8953638-2ec6-3d98-bd26-56ee6ccafc8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:78::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:55:0d:7b:98:0f:a7:14:a9:49:d5:73:71:0a:2e:78:78:0d:
fc:a2:86:86:54:b4:b9:fc:8b:2b:2d:29:35:43:3a:57:b4:ce:
f1:bf:6f:e6:a9:27:e5:67:e4:3c:90:27:52:39:c7:5f:12:2c:
69:0d:51:2a:78:4d:bb:7e:04:a5:e5:64:62:01:c4:a1:b0:ab:
d3:2b:c9:af:69:f0:bb:bf:6b:63:bb:bf:38:13:ca:98:61:72:
c8:a7:36:ab:f9:e7:e4:91:6e:45:c0:51:03:bb:a3:83:58:e0:
03:cb:07:1d:30:64:29:5f:24:c7:9f:b3:5f:fd:45:08:56:2a:
16:da:55:18:0a:5d:0d:fa:c0:3b:da:fe:0a:e8:08:c8:f3:5c:
07:b7:5d:b0:da:30:46:dd:30:ed:54:c8:d7:2b:29:bf:ea:c1:
9b:91:f3:35:a1:a4:15:7e:10:f2:bc:09:f1:46:8e:92:95:15:
6b:c1:ee:29:d1:d7:d9:80:e3:b9:de:27:eb:af:29:d3:ef:2a:
d4:7a:64:4b:f0:23:1c:4c:12:31:33:27:dc:25:f1:7f:69:3f:
a6:b7:84:ff:1e:8c:95:be:4a:04:58:a1:11:0d:c3:19:8a:c9:
44:a8:61:ab:6f:c8:1a:91:11:31:c6:29:c5:24:4a:e0:c2:df:
04:b6:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:50 2025 by rpki-client