Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa
File: de9871b6-c06a-3910-8be5-7c2c3df1b317.roa (raw, json)
Hash identifier: ladYDRLbpiTTQBfdayz8vFWO7I2PNaw79BSPlyeIevc=
Subject key identifier: 58:31:41:96:39:E2:F5:22:A5:AD:FF:0D:47:B2:B2:8C:08:9B:1E:3D
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F43285848DBD66FAAB1530E24C68D8A80
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 2607:340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:6f:aa:b1:53:0e:24:c6:8d:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=3fad0736-c5fa-4f72-9a7b-930cac25dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:44:80:67:2b:00:1c:be:af:b7:c5:8c:44:
c8:9f:f3:be:1a:8f:f6:ad:7c:ac:09:5b:8b:45:a1:
db:59:08:d9:72:8a:17:e5:2d:6e:e0:72:40:81:3d:
f5:07:25:84:5b:78:76:24:4c:46:03:81:3d:e9:4f:
5a:31:48:92:fa:54:5d:98:52:52:69:6b:87:98:03:
e3:6e:5b:f3:51:62:b8:be:4e:36:d5:4a:7b:b5:52:
b1:61:c5:70:25:ac:78:81:41:d0:19:ff:43:3a:78:
9b:10:c8:ce:e8:76:e5:d9:bf:a5:ff:76:40:d3:06:
fc:5b:2d:79:2a:7d:4b:93:fb:ae:de:9e:3f:e0:68:
88:8c:2e:15:ec:1d:25:c7:f3:f8:c5:95:44:8f:0a:
55:06:ad:3f:9a:aa:22:ba:64:08:c6:9b:92:c2:21:
c7:7d:16:8c:a3:42:ce:7f:2b:65:0b:6a:3d:f5:8e:
ed:d9:42:2d:5c:2b:b4:09:20:38:85:f0:65:9e:58:
05:5e:e1:2e:dc:45:88:06:df:2f:17:46:2d:07:14:
8c:e3:c3:6a:20:e8:ce:60:20:86:77:e3:1c:5a:1a:
40:97:d8:bc:08:42:c7:bc:c3:e6:c0:70:25:37:ce:
30:d1:a4:cc:fd:e0:27:81:f5:3f:b9:b6:f4:2a:4d:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:41:96:39:E2:F5:22:A5:AD:FF:0D:47:B2:B2:8C:08:9B:1E:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:340::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:c5:eb:56:e8:af:d6:cb:ee:e0:3d:6a:93:cf:b8:e2:e1:4a:
8d:4a:e1:cc:d4:30:20:3a:81:ee:e3:03:50:32:60:5c:83:5c:
b3:0b:fd:76:5f:68:80:94:04:ef:18:33:33:66:fa:2c:e3:0b:
b1:c2:02:3a:9b:09:f7:e8:69:fe:f4:36:ca:36:95:cb:0b:87:
83:98:6c:ea:70:bf:52:3b:1e:fe:da:14:9c:bb:fd:c4:fe:33:
3a:68:9d:aa:c1:82:a5:f7:6c:6c:98:26:78:06:21:56:cd:56:
db:e2:e2:2a:82:36:89:c7:d4:02:74:4d:a3:24:e1:9b:b4:cc:
6a:ea:54:62:c0:64:8e:c4:1d:3a:a1:b5:d4:53:2e:0a:b7:5d:
fe:56:b7:d5:c3:0f:ba:cc:b9:fb:e2:2d:88:a1:ab:a7:e9:d3:
a6:f4:40:84:f3:c9:4a:f9:5c:db:38:8c:4e:5c:f8:c5:95:7b:
27:b4:c6:e7:db:80:96:b0:8a:a3:0f:f4:2f:dd:ec:70:7e:7a:
28:ed:e0:f4:33:ee:11:42:e3:3a:dc:73:bf:e4:53:b8:f8:2d:
87:88:61:0b:14:3e:b6:fa:82:5a:a2:f4:b1:5b:ef:65:e1:b3:
31:2b:2a:9d:69:10:22:88:04:90:bf:47:74:09:5d:ed:4c:40:
21:2a:a8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:29 2025 by rpki-client