Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa
File: 1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa (raw, json)
Hash identifier: 9CUQmOjMxylX2tKk9ixrg+MP08FuNv0IiKqM17xh9Mk=
Subject key identifier: A2:BC:D0:0E:E1:A9:D1:0E:E3:A3:31:79:31:8F:DD:BB:DA:DA:66:D8
Certificate issuer: /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial: 010D0C9F4328584902EC2CC3831A201FF5CDB240
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 6142
IP address blocks: 2620:9:a008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2c:c3:83:1a:20:1f:f5:cd:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=550311ac-654b-4889-88a0-62bdffa532d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:d2:a2:97:aa:92:c6:17:a8:53:f2:31:48:
fa:83:d3:45:ce:fd:47:29:5f:4d:df:76:80:ba:56:
c9:dc:85:f1:a1:15:d5:54:3b:5e:f6:0b:62:01:a8:
18:7f:04:9d:1e:7e:09:4a:e0:47:b2:8e:9b:b4:cd:
a3:28:50:1d:bd:90:17:49:9a:2a:63:2b:8d:59:59:
fd:6f:e4:13:da:77:ee:a8:cd:54:b8:7a:94:dd:b7:
fa:29:0c:2f:ae:77:9f:0e:83:45:7f:5b:f1:69:4f:
83:87:78:be:24:4f:53:d1:0c:89:4b:e5:3e:b9:5d:
a5:66:4b:70:a2:bb:42:20:6b:46:1b:19:51:0b:c8:
79:62:e0:ec:c3:6a:da:dc:aa:6a:18:dd:ea:c0:6a:
f8:0f:d1:80:e0:2c:38:28:3d:5c:d4:9e:58:9d:59:
bd:b5:57:f7:21:9b:b5:16:06:10:36:3e:ba:63:3d:
e7:7a:b4:07:24:f0:46:37:50:90:3b:cc:8a:c4:b8:
37:0d:55:ab:ba:95:55:e5:e3:8c:7f:28:f6:45:a5:
2a:71:28:34:6f:22:d4:dc:03:3a:51:d9:d8:99:25:
73:bc:cb:2d:a0:12:61:48:95:05:f0:00:a7:29:37:
ec:c3:6e:06:1c:57:8c:19:22:26:77:55:ac:5d:8f:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:D0:0E:E1:A9:D1:0E:E3:A3:31:79:31:8F:DD:BB:DA:DA:66:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
X509v3 Authority Key Identifier:
keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9:a008::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:6e:80:ac:c4:b4:b5:57:c5:f0:6e:d1:1a:dd:12:c2:56:83:
db:4f:0c:be:ae:6f:32:df:ac:c4:4d:bd:cb:5c:ba:fb:26:60:
6d:39:8c:af:8d:c6:c3:c8:67:9b:d2:f4:40:ad:4e:d9:3c:56:
92:50:ea:f1:a4:00:ae:15:e0:f9:f8:cf:4d:a8:49:b5:47:95:
71:a6:17:5a:0f:c1:7d:53:de:03:ae:6c:a6:2f:2d:fa:24:5d:
de:bd:b3:12:6d:04:26:8d:35:66:db:43:86:b9:83:d7:73:6b:
6b:eb:ee:bd:b2:b0:dc:e0:06:52:f6:60:e0:e3:d3:a8:89:f9:
30:0a:e2:8d:83:a5:15:33:7c:42:8b:d4:db:62:14:02:58:31:
82:97:1d:46:41:1b:1c:cc:63:ef:e0:bf:0b:40:3f:36:55:61:
bc:57:fa:cd:70:eb:48:a2:96:ff:cf:66:39:13:ec:e5:e6:a9:
8b:8d:34:d3:19:10:06:db:3e:ce:c1:19:a9:f9:72:44:a7:06:
41:73:f3:27:d2:ec:9b:d6:77:37:1e:b1:0b:9a:ba:dc:48:97:
d7:80:e0:ce:0c:4b:1a:61:89:4e:7e:75:12:99:6f:27:49:3b:
26:a8:55:29:f8:b5:7d:d1:4e:a0:71:b2:a7:66:cd:74:d0:1d:
3d:0d:12:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:14 2025 by rpki-client