Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
File: e843172a-871a-3a64-bad5-2099da6dcdfb.roa (raw, json)
Hash identifier: 4QEGjjkhNONzIPzGKs/2UIJOyAMtv6PDUDzK59ZKqDw=
Subject key identifier: B5:06:B9:B5:36:87:D9:2A:7C:C5:58:06:A4:3E:27:79:A3:0C:D8:F1
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F43285849194184347A3218477D734300
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 400544
IP address blocks: 2607:76c0:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:84:34:7a:32:18:47:7d:73:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=7cc3a619-8ada-4c17-a2d4-eb2e0dcfcb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:dc:9d:a7:90:62:cd:0b:ab:09:b5:26:0a:
85:97:6b:46:12:0b:c2:ec:aa:78:1f:ec:b8:4f:57:
a9:84:e9:8a:6e:8c:b8:1d:55:b6:d2:50:9d:c0:90:
1c:06:47:a8:a0:44:8f:9e:63:bd:75:36:fe:ae:d4:
ce:c6:6a:ed:49:39:bc:16:14:ea:3a:eb:bd:bd:08:
9a:e2:72:57:3c:fb:cb:f1:ca:c5:2a:05:a3:22:c2:
81:34:84:15:43:2a:eb:bb:ff:ae:78:ee:81:b3:a6:
fe:ee:7a:d1:fe:cb:45:c1:46:af:f2:16:ae:a4:90:
38:35:dc:c8:e4:87:86:59:e5:6c:7e:78:aa:90:cd:
60:55:0b:ea:e8:cf:6a:8e:b8:7b:0a:38:5f:12:66:
1e:44:1f:7b:5e:03:92:1d:b8:d5:de:24:9e:b0:09:
75:ca:21:60:c9:d7:51:e7:a2:13:2b:73:0f:c0:d7:
e1:e3:0b:64:92:bf:50:2e:8e:ba:0a:f3:73:0b:b5:
ac:7f:70:ad:4d:51:cb:6e:ec:ca:94:55:25:30:ca:
17:c8:83:bc:e1:7f:2f:50:d6:22:ba:47:e6:fb:41:
81:b2:74:d6:0b:91:c6:f4:6d:fc:ca:59:50:f4:ca:
32:8c:73:ea:30:1a:a6:1b:50:6e:03:f0:93:16:4b:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:06:B9:B5:36:87:D9:2A:7C:C5:58:06:A4:3E:27:79:A3:0C:D8:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:76c0:10::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:2d:75:4d:9f:a5:68:ef:ec:af:d3:01:24:3b:49:43:ae:e3:
c2:84:a9:50:e8:52:59:83:d4:92:7a:15:a3:6a:14:4f:ee:00:
a2:e7:72:1d:71:b5:42:da:34:95:51:2a:8c:5b:fc:39:97:4a:
fc:88:9e:6f:74:fa:80:63:ec:3e:32:26:96:c3:04:dc:41:63:
3d:df:65:c0:3a:94:d3:78:28:54:2d:0d:e8:42:12:ba:3d:0e:
55:68:65:29:05:d4:84:05:b7:8f:19:9c:8f:97:12:dc:38:4d:
9d:6b:bb:87:41:98:de:b0:3d:6e:10:4b:6c:e7:31:fc:2a:22:
7d:6d:b4:82:29:e2:26:2b:bf:5b:b9:c1:11:39:03:c4:7e:eb:
76:17:9c:3d:eb:76:02:1c:e6:61:9d:9a:40:92:c9:bf:5b:83:
3f:21:47:f7:e5:22:c6:96:e3:08:3e:5f:66:55:bd:7a:a7:91:
97:ee:77:85:61:98:e0:a6:c6:2e:d5:e3:ee:bd:57:3f:01:ac:
c6:00:8d:27:1c:3b:57:5f:8f:0a:00:c3:33:6a:28:6d:af:cf:
37:dc:7b:78:57:cd:62:2c:a5:46:f7:af:8f:6b:91:58:cb:b2:
44:4b:e7:2f:94:c8:4a:42:2d:0e:87:8d:0b:49:4f:e4:a5:32:
6d:54:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:59 2025 by rpki-client