Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa
File: 4c2775af-33af-3124-b5d4-2a57727ace54.roa (raw, json)
Hash identifier: 1S/GUIx9AbaIyvXa85QGysvGMmdvxBv7KTRqtw/IvAs=
Subject key identifier: 3D:65:3B:46:56:85:47:5E:6F:A8:3F:85:E2:8D:DF:90:32:18:F2:61
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285849218436DE724224C754543C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2001:4888:8035::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:36:de:72:42:24:c7:54:54:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=f167db0d-ba9c-43b0-8c73-0e52f9722024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4f:76:df:b3:f1:a7:e2:16:ad:03:ee:48:c3:
c8:02:b9:af:1c:16:ca:0c:e8:b5:c4:fe:63:ae:cb:
2a:a5:74:6e:cb:04:5e:5e:d6:08:56:21:ab:0b:a6:
10:42:fd:5d:5a:f2:17:5b:28:a1:8c:b3:fc:de:06:
1c:82:07:4f:f7:47:89:3f:22:d3:4b:9e:c2:55:87:
cb:98:e9:26:0f:09:4f:0c:32:df:4a:49:f1:b0:49:
8f:fe:3a:60:c8:b7:66:37:8e:74:ba:5d:e5:d9:36:
90:b1:e1:aa:c7:79:d1:bb:cb:1f:8d:22:f5:58:e3:
67:1b:65:66:c8:6c:e7:01:c2:af:75:5e:3e:f2:7f:
da:55:d4:3e:f9:63:7f:5d:b7:fe:97:da:34:00:84:
e2:9b:61:2f:91:01:05:b7:3f:34:35:ae:65:81:08:
e5:ab:d9:26:48:c8:81:27:92:ff:91:0b:af:20:7a:
76:c3:87:e1:9e:20:b9:24:2a:21:6b:2c:5c:fe:52:
49:5c:c6:de:3b:10:b9:81:df:1e:11:8b:d1:46:bb:
84:0f:d5:bf:9e:89:d8:34:ec:e2:2c:cd:f9:c3:8f:
a5:26:b8:f0:2f:61:ea:de:48:3d:71:a2:c5:38:f8:
e1:98:7b:89:5c:ed:bb:23:35:bb:a2:65:4a:20:6e:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:3B:46:56:85:47:5E:6F:A8:3F:85:E2:8D:DF:90:32:18:F2:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:8035::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:7b:ba:7f:24:c5:a8:c0:55:89:99:ae:0d:5c:82:7a:99:20:
6d:fc:7b:44:43:44:20:7f:a7:a2:8d:d3:ec:9f:7e:a0:f2:64:
24:09:35:a3:33:7a:e8:3f:4e:b9:db:74:5a:9b:1f:06:28:ae:
72:64:60:ac:d4:bf:f3:9e:ae:e2:0a:cf:7b:c6:e3:54:ba:4c:
64:4c:25:83:7c:e1:ab:86:11:ac:56:27:fa:d8:27:71:af:0c:
1f:67:d8:72:20:80:47:52:c8:94:61:f7:41:1d:af:ca:c0:fd:
7a:fa:eb:3d:28:e4:a8:50:25:94:51:f7:cc:8f:ad:1f:fb:03:
f4:90:77:a7:57:ee:7d:a2:41:6c:27:c0:dd:4c:38:27:fe:01:
b2:91:67:83:57:12:da:6d:b5:9c:9e:bb:9d:46:b0:ea:f0:32:
20:36:39:9b:6b:7c:1c:4c:be:71:79:d0:0c:c9:c8:a3:40:34:
4f:62:47:c3:6f:1e:aa:94:35:b4:f2:08:63:66:48:b4:5e:1e:
f9:4f:5d:a2:ac:97:fa:45:1e:0a:fc:84:11:f5:2c:12:e8:e7:
ea:8e:56:f8:af:c7:9f:6e:8f:46:2c:87:d8:15:89:69:eb:9e:
b6:aa:28:23:07:63:d2:84:f3:45:da:7a:40:c5:9e:db:fd:db:
51:b5:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:12:52 2025 by rpki-client