Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
File: 2523a460-454b-387d-8a94-5c40f8f7d030.roa (raw, json)
Hash identifier: Y0vsHe9QvrSz9vPJ6lOzpyKwTQK3wtNVqppO8RAFvqc=
Subject key identifier: F0:D7:9F:1D:8D:72:70:B7:65:29:A8:C0:01:60:8D:1F:8E:D1:6D:ED
Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial: 010D0C9F432858494303F458ED38BDD20046A374
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 29834
IP address blocks: 2620:1f7:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:f4:58:ed:38:bd:d2:00:46:a3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=884b9dea-5bf0-4b0e-9b6b-339c9376a0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:d7:bf:8e:b1:7c:55:2c:16:c6:cd:8e:bc:
29:bf:2d:94:a6:3a:2b:db:1a:b7:73:12:08:f2:3c:
2c:ca:2c:f1:f6:24:b3:ff:1d:5f:cb:e8:59:96:1a:
31:86:ba:fb:a8:62:bb:94:aa:c6:5d:85:ce:c8:f6:
72:82:d2:8e:52:9f:8a:5a:cb:c1:27:26:f9:32:d3:
48:b1:81:d4:ab:a3:3a:20:75:f9:4d:5a:76:4d:e9:
0f:97:ba:fc:03:67:2c:5f:27:03:a4:20:f8:d9:fa:
85:65:79:50:ae:81:b6:5c:b4:2c:58:d7:4b:2b:5e:
34:ba:b4:74:cf:74:53:6d:9e:96:cb:96:2d:89:df:
f1:5f:91:4f:e3:95:ea:15:20:fa:d9:42:99:19:1b:
a5:8f:f4:ca:7e:6b:4c:e2:b0:c9:8f:97:c2:a3:37:
7e:30:0a:5c:00:13:ff:74:f8:d0:ce:4c:b4:12:18:
8f:9d:60:48:15:c6:73:70:13:8f:e8:d0:6a:1a:54:
c9:15:46:2b:36:43:28:ed:8f:df:fb:75:3f:fd:84:
3a:6a:58:76:ac:23:f8:1d:84:a0:2a:4f:b5:76:b2:
cd:cb:e7:57:90:b5:6e:b6:f4:b1:59:a5:8e:6f:fc:
8d:05:19:ab:23:9d:c1:0c:6e:9f:52:6a:d6:7d:2e:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D7:9F:1D:8D:72:70:B7:65:29:A8:C0:01:60:8D:1F:8E:D1:6D:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
X509v3 Authority Key Identifier:
keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:1f7:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:a3:f2:c1:22:68:8e:3f:cd:54:8b:c4:71:ae:95:14:67:6f:
cd:23:c0:f5:5b:e2:8b:f0:6e:b7:d9:d8:b3:61:ef:b3:59:f6:
ee:12:70:88:ec:82:38:a0:3a:51:c4:a6:f0:63:4b:f6:70:c3:
3b:94:7d:e1:32:14:1b:c8:ca:c6:f9:72:0a:40:5a:e6:a7:9b:
27:8e:0e:1b:c6:ec:0e:b6:5a:af:aa:c0:aa:5b:c0:e0:ee:03:
63:95:57:a8:55:80:6a:88:d6:6b:ee:94:21:63:7f:20:ba:6d:
48:b6:f6:61:c5:65:4b:6a:77:04:6b:e6:5b:33:bf:19:a0:17:
3d:76:37:b9:25:5b:81:7a:c6:85:fb:42:0b:20:cf:9d:45:a9:
34:38:3d:02:59:fd:62:69:a4:39:f3:8b:aa:51:92:be:ef:ed:
0d:73:b8:b4:00:93:b8:5d:7a:35:77:31:9e:ee:42:7f:98:f5:
48:ce:01:45:7a:ea:07:6f:c5:26:af:62:97:ae:23:d6:86:4d:
5f:35:0d:cb:41:30:e6:86:12:0e:fe:96:49:71:1f:3b:c3:0c:
c3:41:ef:66:ca:34:30:b8:7c:73:91:d4:dd:20:ca:fd:cb:f6:
9b:0b:e1:b3:de:6d:25:ec:7b:d0:4d:e5:1a:c0:c8:b3:2b:f4:
86:0c:80:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:21 2025 by rpki-client