Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/c5ff4d28-68c9-3187-8939-4157d657b3f3.roa
File: c5ff4d28-68c9-3187-8939-4157d657b3f3.roa (raw, json)
Hash identifier: yi5nY9vOwta/6ASZF2ZsZzyO+DG6BU0J2Q7W7AV8eT4=
Subject key identifier: A5:46:C4:E0:5F:40:C1:8A:C5:2D:FF:79:E1:62:86:88:B3:5A:81:4F
Certificate issuer: /CN=465254d1-eb33-4b2f-b753-c2021a9446e4
Certificate serial: 010D0C9F43285848A996254B40CC4B54ABE0DC80
Authority key identifier: 1D:79:2A:64:F1:30:F6:4B:99:82:95:43:16:86:0B:9C:3B:07:B3:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/c5ff4d28-68c9-3187-8939-4157d657b3f3.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 21662
IP address blocks: 2607:1fc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:25:4b:40:cc:4b:54:ab:e0:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465254d1-eb33-4b2f-b753-c2021a9446e4
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=cf4f88ef-c0fd-4a09-83c1-355b2814a945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:c6:93:a1:f1:22:84:20:58:b0:2b:7d:e4:
7b:ad:80:57:c7:9a:c7:00:db:df:96:71:e1:4c:c6:
54:fd:7a:16:8a:b4:44:92:6c:3b:c0:84:55:fa:45:
03:41:96:e0:31:38:93:21:52:92:de:ed:8f:cc:b7:
0b:5e:f4:86:0a:fb:32:6c:3c:74:2f:62:22:99:e8:
0a:a4:2b:b4:be:48:ec:1d:a0:08:20:0a:c8:49:79:
ee:ac:e7:4c:73:36:1b:22:e6:26:d6:86:04:5a:dd:
70:d9:9b:f9:b6:69:6d:0b:40:83:3e:2d:24:96:aa:
ac:0c:d2:2a:b6:30:58:ed:f0:5c:1e:73:1b:1d:aa:
db:eb:a5:d5:d9:01:09:db:35:05:74:63:8c:0a:1f:
1f:3d:ca:34:0c:62:55:6b:e8:4a:3c:75:29:b2:8e:
9b:d3:c9:86:80:6d:a3:86:0d:e2:27:46:5b:c5:c5:
63:4f:f6:f7:3c:4f:b1:c2:bb:1c:f2:44:04:d9:68:
89:d3:97:13:3c:ef:e4:58:06:01:f4:aa:2c:b3:72:
54:b4:ad:8f:18:78:59:d4:62:26:a7:d8:30:da:69:
14:52:16:a1:82:27:85:0e:01:55:23:c1:c4:28:2a:
4c:0e:c9:09:96:47:0a:e9:f3:83:5b:d2:1b:35:b3:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:C4:E0:5F:40:C1:8A:C5:2D:FF:79:E1:62:86:88:B3:5A:81:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/c5ff4d28-68c9-3187-8939-4157d657b3f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.crl
X509v3 Authority Key Identifier:
keyid:1D:79:2A:64:F1:30:F6:4B:99:82:95:43:16:86:0B:9C:3B:07:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:1fc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:9f:7a:78:b5:b5:0d:ff:5e:d3:69:23:b3:f6:a1:10:b5:34:
f1:c8:53:b7:b3:22:02:b9:1c:84:84:8a:16:34:80:86:b0:e7:
0d:d2:42:d5:12:b4:04:4f:ee:9b:1a:8b:ff:f6:dc:ea:03:2c:
48:b0:05:58:aa:bd:c7:f2:ea:a9:15:d7:19:3f:30:bb:20:7a:
cc:b0:c1:ed:e4:ad:36:5e:d2:d5:d0:d0:96:82:28:11:04:e0:
5e:a6:46:43:5b:87:6e:68:09:af:b2:78:e4:9a:35:e2:4a:81:
5f:d7:1f:b7:15:83:32:3f:f4:cf:9e:1b:bc:5a:49:41:32:2b:
85:f1:59:34:16:7f:97:62:76:48:f8:47:d1:17:9c:ad:e3:35:
a0:28:b3:9d:a5:93:5e:d5:74:11:f4:2a:da:2b:96:15:19:f0:
bc:0c:b2:4f:94:7a:9f:a3:ff:9a:57:54:08:88:85:cc:42:e0:
4e:c0:7f:36:ec:81:9d:41:6a:de:f5:23:3f:c2:fb:73:65:8e:
b9:2f:cf:d4:10:48:e6:04:25:96:1c:32:a1:c5:81:aa:1d:2e:
47:82:6b:f9:14:55:cd:d8:6b:99:d2:6f:57:8f:70:71:6e:d9:
79:0f:1f:1a:b5:9c:14:48:c9:12:fc:cb:8f:8c:38:56:eb:b1:
bf:4d:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:42 2025 by rpki-client