Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/da26af4a-575b-3a26-bf28-3f6bed91cdae.roa
File: da26af4a-575b-3a26-bf28-3f6bed91cdae.roa (raw, json)
Hash identifier: q1XwB1ObrereRukky6G4BgtT3KwSKIrRybgXfiaSgr4=
Subject key identifier: 7D:2D:C7:6D:84:F4:3E:7D:0A:57:A0:7E:7E:14:44:5A:04:2F:C6:7D
Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial: 010D0C9F432858491ED6D6BD0FBFA672EEDD3980
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/da26af4a-575b-3a26-bf28-3f6bed91cdae.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 53766
IP address blocks: 2620:df:4000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d6:bd:0f:bf:a6:72:ee:dd:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=25c42582-0ec9-40e6-8d32-f81775e4acfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:11:44:82:d0:89:bd:32:19:2b:df:ff:05:
59:2b:4d:45:d8:21:aa:ab:44:bd:d7:f4:63:71:ee:
32:d0:d2:2f:ec:66:48:9e:4f:e8:d4:60:5b:20:25:
9d:05:9b:6b:76:ab:e3:6e:dd:82:34:4c:fc:0c:70:
27:86:76:29:0f:e8:6c:69:31:d6:c3:c7:23:56:98:
83:e4:13:45:f8:92:5c:63:aa:cb:9c:2a:37:1a:c7:
f3:24:38:ec:a6:57:b4:ec:82:74:20:0f:42:95:17:
df:3d:aa:49:4d:08:0f:f6:db:59:31:30:cf:e2:b8:
a4:7d:83:93:f6:84:24:4a:ad:ab:d9:28:e1:d4:fd:
16:39:d4:0c:d3:5a:bb:be:1e:c3:0d:a8:06:fb:a4:
15:3a:24:d8:36:c2:5a:a7:07:a1:58:52:49:4b:7c:
ef:62:00:27:91:0e:00:1a:44:54:fd:d1:95:57:1f:
87:8b:6a:0f:48:cf:2a:d0:27:f1:39:73:cf:00:79:
da:cc:d4:59:74:2c:ef:ae:b9:6c:14:7e:08:4d:a2:
30:14:f8:f3:80:00:29:da:e5:a6:b6:f0:11:41:61:
cc:fb:8b:83:23:bf:d8:62:73:de:ca:e2:bb:7a:bc:
39:2c:fe:0a:ff:c9:4d:82:80:88:1a:02:d4:85:4a:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2D:C7:6D:84:F4:3E:7D:0A:57:A0:7E:7E:14:44:5A:04:2F:C6:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/da26af4a-575b-3a26-bf28-3f6bed91cdae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
X509v3 Authority Key Identifier:
keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:df:4000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:af:70:bc:c0:34:8a:5f:8f:77:ad:ea:b6:57:4a:db:ae:51:
97:cb:0b:17:e7:29:35:26:a2:c0:3a:37:89:fc:17:00:f7:1c:
5f:8f:58:4f:16:4e:3b:b1:a4:8c:a0:3c:ff:71:2e:fa:21:fe:
43:4e:4f:70:22:c0:44:f9:b6:f6:de:8d:df:e4:97:4b:f1:60:
8d:0e:bb:13:c7:c2:bf:b6:ad:66:51:d5:da:71:4a:a9:97:3b:
48:25:92:f0:ef:3f:10:c0:dc:39:c8:b5:07:35:88:ee:41:12:
a9:6e:64:7a:b3:29:33:0a:22:5f:e2:d5:f2:c8:23:cb:68:aa:
e1:7d:c9:d9:43:76:4e:b9:cf:9f:9b:2f:d8:79:ae:6e:55:fe:
7d:48:9f:2b:2e:a9:89:66:1e:5a:72:5e:f3:e5:c2:a0:b1:24:
f6:18:c2:e6:92:5f:5a:f1:fb:de:1a:07:91:73:3d:b3:53:6c:
32:4c:cf:c9:11:b3:87:16:d2:f0:b4:d2:a4:66:08:dc:73:1a:
28:7f:12:06:df:07:9d:3f:53:50:91:76:4b:a8:38:78:41:89:
db:bb:24:93:f2:eb:53:84:ce:9d:e5:22:ef:c3:0d:bc:19:a4:
bd:af:7a:61:ed:61:48:1e:7b:92:1d:39:c1:70:1c:1a:31:12:
1b:ba:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:42:29 2025 by rpki-client