Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a241abc7-44e5-303d-b68b-d56800874c3c.roa
File: a241abc7-44e5-303d-b68b-d56800874c3c.roa (raw, json)
Hash identifier: YwUJqAS6QSQ6uKBHehHI09mCm8CgvlvMeiT1s33253k=
Subject key identifier: A9:B3:11:5F:6A:1B:0B:3E:1B:8E:91:86:FD:54:02:0A:74:08:B6:A5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858492184370C042C5458C1D30B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a241abc7-44e5-303d-b68b-d56800874c3c.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2001:4888:8038::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:37:0c:04:2c:54:58:c1:d3:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=845fe450-18ba-40c2-bc3f-7a422a73423b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6a:6e:bc:66:5b:1d:81:8c:71:d3:94:23:c9:
eb:12:83:02:ea:87:7c:36:42:c1:e0:b2:1e:ae:0e:
94:a7:9d:15:97:37:27:3b:6a:7e:f6:cb:c3:83:d2:
06:70:97:ac:2b:55:89:85:31:e5:5f:d9:f0:31:74:
4b:4f:d2:f7:23:17:9d:ce:26:39:e2:ff:13:f7:00:
4b:2a:63:9a:55:6e:a1:6c:a5:3d:cb:1e:00:02:27:
0c:b6:bd:c6:e8:9b:ff:2f:6d:d9:a8:f8:77:86:80:
da:e0:42:59:ec:73:9b:97:b5:0a:8e:a8:78:70:ce:
2c:4e:90:e5:d8:4f:ec:67:c0:de:a9:85:72:eb:1f:
83:82:5e:52:a2:b7:94:f3:96:29:cd:f1:f3:0a:58:
87:f0:76:b6:4e:ac:f2:d3:bf:89:85:12:72:25:62:
c4:41:3c:fa:3a:f6:72:54:e4:95:f7:1a:53:92:74:
5c:b8:0d:0b:b6:28:08:ba:92:51:33:06:4b:70:b6:
1c:ff:f8:f6:0d:d0:68:3a:51:0b:a1:df:c1:ac:b7:
7a:cf:5a:35:54:38:58:6f:1e:33:93:7f:2a:bf:57:
c9:14:36:b5:f5:e7:be:b1:5b:cc:13:29:b4:22:ad:
56:98:6b:b8:05:89:2a:a9:6d:de:79:46:cb:a4:85:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:11:5F:6A:1B:0B:3E:1B:8E:91:86:FD:54:02:0A:74:08:B6:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a241abc7-44e5-303d-b68b-d56800874c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:8038::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:35:5c:86:ba:b9:72:a6:cd:18:c2:95:6d:c1:d2:92:7f:b8:
c0:e9:d2:2e:e2:fb:34:4c:ea:1c:f5:90:b1:00:f4:a1:49:b9:
1e:c4:08:1c:87:37:86:89:3e:c3:72:be:f7:af:9d:c7:41:0e:
6d:8c:de:e8:30:7e:26:4c:44:32:0a:b0:b1:f4:9b:f8:b0:6b:
51:db:11:34:22:33:b4:0e:f0:22:3f:d1:8c:93:5c:3b:29:7f:
fc:88:8f:f6:ce:a3:39:21:99:b2:31:37:01:c2:5c:bc:2a:3a:
1f:a4:19:f5:93:87:66:d9:cb:3c:98:cd:79:8a:ea:c4:cb:bc:
39:8d:8e:3c:28:3f:d8:a0:c2:7a:34:b9:ef:74:51:75:f4:c5:
49:f9:e6:25:d5:c8:05:8d:ee:bb:35:85:84:77:27:b6:44:80:
0b:e9:79:6f:55:a7:c5:34:f0:5e:bb:42:e6:64:b2:46:80:f1:
1e:d0:f6:e7:76:eb:68:b0:24:0b:81:07:c2:f0:ce:f1:b1:3c:
25:1c:a4:ef:0d:ff:38:63:fb:db:74:97:e8:65:d2:2b:76:af:
d7:27:5c:a7:b5:fa:71:ae:0f:a2:ed:a1:d4:0c:58:4d:44:72:
05:12:46:fd:e8:ce:3d:83:75:c7:1c:f2:fb:a0:f0:72:55:ac:
2e:aa:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:04:37 2025 by rpki-client