Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
File: 8370a0b9-b3bb-3794-b676-98a3ff12db47.roa (raw, json)
Hash identifier: E2E6Z16ADalkJpPF+LB5nclc7VMbULZhK7EC1RcV0Gk=
Subject key identifier: EE:28:C2:B1:DA:9D:9E:9E:A6:1B:6F:E7:0D:E9:47:08:10:CA:B4:0A
Certificate issuer: /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial: 010D0C9F432858494733EE28FE241C645916C240
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 6142
IP address blocks: 2620:9:a004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ee:28:fe:24:1c:64:59:16:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=9efcedf9-97a1-4f27-bc89-a600d5f7e93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:67:30:d6:8b:14:12:ea:9a:31:6e:32:6c:
40:d2:b7:8d:cd:ef:ae:9e:6a:d8:bc:af:5a:4e:9e:
99:c2:e1:94:9a:c1:43:5e:4d:90:c1:33:6b:53:c9:
83:68:9b:0b:78:18:c6:f1:09:c3:6e:21:b6:8e:95:
c2:93:26:49:37:3b:f7:0b:14:53:0a:fd:4a:fb:54:
23:98:b2:f3:96:b9:1e:b6:03:17:d0:65:24:2b:b0:
d7:21:ba:f1:a4:70:ef:52:d0:51:c8:f9:35:4d:e5:
bf:6c:24:e1:01:7e:5c:76:54:d5:9e:24:c5:01:a6:
49:ed:98:22:e6:c8:4b:a2:00:31:e6:81:0c:e6:bb:
9c:6a:b2:c8:97:d8:b4:b9:a7:40:0d:3d:51:64:9e:
18:47:7b:1e:fa:fe:36:7e:b5:cd:e6:98:f1:50:27:
a8:9f:75:47:9c:bf:4c:6f:46:4f:22:f7:38:68:27:
a5:57:c8:df:fe:d3:07:11:05:48:eb:b3:33:42:23:
ed:a6:ab:50:91:64:bc:71:58:15:0a:c1:3b:b3:02:
eb:89:c3:6a:12:11:f4:e5:05:99:b6:59:d0:b4:04:
c5:29:97:52:f5:01:db:30:87:55:02:fc:8d:80:73:
1a:75:4d:c6:04:ed:19:9f:dd:6a:53:42:8c:ef:25:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:28:C2:B1:DA:9D:9E:9E:A6:1B:6F:E7:0D:E9:47:08:10:CA:B4:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
X509v3 Authority Key Identifier:
keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9:a004::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:1a:0b:08:4c:31:62:58:62:d8:ca:3f:8c:f3:f8:86:92:a6:
cf:d5:e1:b1:f6:1b:9e:c0:61:c0:6f:26:a3:fe:79:92:f0:74:
3a:68:d5:2b:0b:5d:e4:aa:42:2c:af:d4:de:0b:4b:32:66:f9:
ce:42:a6:59:e7:fb:8d:b4:76:7c:9b:f8:1a:fd:49:59:bc:e6:
d5:38:70:e2:3b:62:d4:07:76:00:f6:40:ea:85:77:2c:9d:e6:
4a:01:40:1a:b7:9a:af:32:89:70:07:cf:59:45:90:eb:a0:f9:
af:02:29:3e:19:05:c4:be:51:7a:0f:11:f0:2a:7e:0c:0d:6a:
65:6e:69:84:f5:f0:a4:f5:f5:86:16:04:a1:bb:e1:1e:71:a6:
47:aa:e9:78:5a:4c:15:04:e1:3b:3f:64:85:a3:72:a8:0c:80:
35:0a:5c:60:1c:c0:08:02:c8:b7:15:4d:c7:55:53:9d:70:bb:
43:ac:86:97:36:cf:ce:5a:17:cd:a5:05:f2:9e:b3:58:34:59:
7a:b3:af:da:ca:58:20:a2:c4:67:0e:79:e8:2f:2b:33:9c:44:
19:18:22:d1:ae:74:b3:6f:74:e9:22:38:f9:07:8d:96:53:4b:
66:a4:84:6a:d1:7f:7b:3d:42:c9:45:0a:9a:0b:a7:37:2c:d7:
2b:ce:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:38 2025 by rpki-client