Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa
File: 0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa (raw, json)
Hash identifier: eV0iVK6LD7umeX2WkrZ/ia3WFFm2PgxNWMh3eQVa0fg=
Subject key identifier: 70:7F:12:3E:7D:E7:61:4B:B0:4E:AC:C1:BD:38:D7:F2:AC:FF:36:53
Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
Certificate serial: 010D0C9F43285848AF2B7CE1CE2502019797BF40
Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 31898
IP address blocks: 2620:11b:9000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7c:e1:ce:25:02:01:97:97:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=f4e2bd46-8652-46c4-9abe-52b97386ff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:16:b2:35:17:cd:6c:fb:b8:de:82:d6:29:
e3:f3:c7:2f:5d:7b:c8:50:d5:47:3d:5c:75:c4:ee:
6e:61:91:d5:28:f9:fc:f4:86:dd:99:8b:2e:e1:e8:
0f:7c:51:7b:75:64:08:ff:eb:2c:17:ca:88:d6:68:
a5:40:4a:bd:1f:2e:93:04:da:da:5a:9b:ff:b6:5a:
d2:36:13:32:79:d5:90:06:fe:d6:2e:8e:3c:14:f6:
fa:4b:41:91:84:6e:53:a4:63:2b:db:b1:ae:51:d0:
f3:15:bc:db:66:84:27:a0:96:85:31:e6:0a:74:b2:
9c:44:7e:cd:8c:6a:89:af:ab:da:24:bc:eb:5e:7b:
e0:d8:70:4d:68:ae:f9:e3:0d:e4:bb:c6:5d:53:39:
df:48:6c:0c:14:c6:69:d2:45:32:74:5c:2c:12:71:
56:5b:4e:68:9b:03:e0:00:1b:a9:da:19:51:b4:c2:
f1:ea:a7:e0:12:c1:63:81:3b:2b:2f:a4:4d:51:92:
6b:11:96:17:c1:17:e9:e9:52:a2:e9:5e:47:91:4f:
f0:4f:67:15:24:32:7f:94:08:9e:ea:e3:6c:12:61:
92:90:5d:e6:aa:0b:3a:d4:fa:ca:5b:8f:ff:2e:1d:
d6:86:66:2a:3f:65:db:73:2d:1e:c9:96:2c:33:0b:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:12:3E:7D:E7:61:4B:B0:4E:AC:C1:BD:38:D7:F2:AC:FF:36:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl
X509v3 Authority Key Identifier:
keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11b:9000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:2d:e1:44:c2:a0:39:6b:56:42:f0:67:03:ed:c6:27:c1:cf:
b0:fc:4c:74:5d:1a:ba:d9:59:7b:9a:47:ac:29:a8:77:6f:17:
73:f4:ae:d8:49:b3:e1:a1:a5:0e:54:a8:da:68:c8:20:db:2d:
69:78:8b:8f:63:2e:cc:bb:7f:b1:12:8e:60:85:16:e5:39:07:
2e:08:9e:76:4c:a8:89:fd:7f:4c:fc:28:4b:a2:7d:99:f6:d8:
5d:0c:16:aa:6d:2b:cd:f8:a9:a5:02:4e:d2:52:48:e4:00:1b:
9f:54:a7:a7:71:5a:40:4c:e4:48:1d:07:b1:68:35:94:2b:b2:
82:30:f4:44:95:85:f6:39:f8:34:1a:cb:1c:ab:33:84:92:18:
2f:2a:01:d1:e2:0b:a1:41:db:3c:b3:d8:79:22:88:59:8d:c9:
0d:d8:0e:90:e6:33:7b:dd:2a:db:3a:6b:9b:fa:11:e9:33:22:
b5:0a:e4:7f:db:de:87:5e:ba:97:1a:5e:e6:e3:c1:7e:c0:92:
e6:c0:b2:62:11:99:0d:bd:7a:40:19:6c:6b:8f:c6:98:8f:8f:
bd:d2:24:4f:07:ef:a3:cb:b3:da:61:62:30:17:42:1f:4a:b7:
07:60:b9:38:97:41:39:f5:49:2e:85:eb:0e:56:06:d0:69:5e:
dc:34:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:08 2025 by rpki-client