Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
File: b573f29f-c08e-304d-92b2-cd55eb7addda.roa (raw, json)
Hash identifier: a8avf+GviiEiP7YRuRl5WRhs7XFspIGz0jQJys9tn6Y=
Subject key identifier: 93:C3:DA:CB:22:E7:5E:4E:F9:AD:0D:FF:01:33:EC:B4:14:BE:9C:4D
Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial: 010D0C9F43285849203C10A60B0A069E110BAE00
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 40244
IP address blocks: 2604:7c00:500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:10:a6:0b:0a:06:9e:11:0b:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=7fba41ff-0dfd-497f-832a-e0d65699b14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:b5:45:ad:dd:69:23:0e:6e:2a:da:15:7b:
d4:10:c2:35:7a:a8:dc:3a:36:b6:1c:d7:2c:41:8d:
33:7c:6d:50:b3:73:3b:b4:41:ef:ac:3f:af:e3:04:
c9:6e:8c:48:05:18:85:0b:66:e5:f6:29:d3:e4:0b:
6c:b0:05:d4:4a:f5:96:08:ed:87:1a:26:11:43:68:
f7:59:14:13:75:50:24:09:39:88:3b:74:81:49:ef:
e4:27:51:7e:8a:51:1c:10:94:07:50:34:50:76:d0:
77:a3:2b:a0:ef:24:a0:3b:4f:02:9f:bd:1a:f9:64:
53:3b:3b:59:26:f0:9f:f0:1a:fa:00:54:c5:a9:34:
66:40:67:ee:f5:af:18:96:2d:1d:bd:68:26:b8:93:
84:4d:1c:31:b7:19:16:19:e7:b8:a9:c2:3c:c5:f3:
af:07:85:2f:6c:12:22:ef:39:10:bc:8a:c8:31:8d:
83:a5:19:98:04:24:72:f0:48:30:c9:ba:ee:0f:6b:
0a:8b:a5:a5:09:ac:e4:35:f2:20:b3:ed:aa:27:07:
ca:75:8c:17:5c:dc:b0:bd:54:17:65:b8:4f:7e:27:
66:aa:a3:33:42:1c:d2:c0:ce:14:f6:6c:aa:b5:66:
f7:b8:79:80:b9:ce:26:6b:de:e9:e5:13:a9:5a:1c:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C3:DA:CB:22:E7:5E:4E:F9:AD:0D:FF:01:33:EC:B4:14:BE:9C:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
X509v3 Authority Key Identifier:
keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7c00:500::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:38:4e:44:f1:8c:d3:e9:a5:5b:77:64:8c:ee:47:75:1a:ba:
90:f8:05:63:e3:f3:2f:47:4e:9e:5d:7d:17:7f:60:87:a7:43:
d7:3d:48:b4:56:4a:f2:07:da:ae:d9:83:fb:01:7b:b9:c9:f4:
bd:d9:ac:96:e2:35:b0:f7:62:75:b4:8c:cd:ca:40:82:8b:cf:
c4:a9:27:8a:84:17:d7:0b:c1:48:25:45:15:fa:1c:3a:66:f5:
c7:de:77:b3:ab:a8:1f:ca:bc:7d:c0:52:32:5a:03:9a:14:37:
9e:9e:36:06:6c:8b:8a:ad:f5:38:cc:39:ed:d9:14:c5:12:da:
55:0f:88:99:7c:32:13:e4:6b:38:48:d3:a1:ec:ca:08:bb:0f:
f8:79:37:4a:da:2a:05:96:bc:e8:df:47:34:27:e2:03:b5:35:
a9:28:0f:3c:69:c0:08:5a:f6:b5:f7:56:8b:4b:c7:b4:73:e9:
46:a1:33:e0:61:80:77:61:47:4b:1e:fd:84:94:ea:48:71:fc:
0a:44:fd:01:93:66:9b:9c:ab:6a:61:7f:04:57:f4:2f:85:ab:
51:a8:3c:01:c7:cc:b0:51:f1:d2:dd:6b:e9:2c:98:e1:4b:da:
55:46:97:41:cc:6a:21:a1:8c:12:41:29:79:53:c8:94:42:63:
03:31:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:52:14 2025 by rpki-client