Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa
File: 0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa (raw, json)
Hash identifier: QX4iQbVJyS9GPVE9xRKnr+WdYJatKSVy0HVW2+I128Y=
Subject key identifier: C3:0C:BF:D2:CB:65:AE:90:A6:B8:79:5B:23:B8:84:9B:43:20:73:F9
Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial: 010D0C9F432858486AC5962CBB83CE6C9BD76600
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 8075
IP address blocks: 2620:7d:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:96:2c:bb:83:ce:6c:9b:d7:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=96f9a7d5-cec4-4c95-9b6c-820a91e63db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:da:71:a9:88:65:b2:99:42:61:0d:c4:f5:
54:ef:36:26:34:f2:dc:ad:e6:67:a1:0b:59:b4:9f:
e6:67:ae:ec:83:0d:e0:1c:85:53:55:43:61:44:74:
3f:ae:7c:df:06:e1:2b:9f:21:14:be:06:63:35:ab:
3b:62:f6:77:76:1f:62:5f:c9:c6:37:45:75:e9:ed:
55:e4:34:36:a1:90:e5:1d:86:ce:e4:d2:23:4f:ce:
62:51:7b:75:61:25:27:c4:6c:29:53:df:76:0c:65:
d9:9a:82:99:0c:e1:c4:9d:22:1c:cf:2a:9e:e9:5c:
77:53:90:73:9e:2b:f6:52:db:bc:23:f1:0d:86:cc:
7d:97:2b:b6:59:81:5b:99:fc:ee:c7:1e:81:9e:fe:
d3:ff:58:be:7b:5e:fc:b9:01:6c:e7:c7:58:06:80:
17:24:ac:aa:dd:3e:10:80:28:46:9c:c3:7b:48:89:
fa:c2:d7:21:a7:a7:7c:f6:e8:8b:db:e3:d7:df:cf:
36:ce:4b:4a:5f:e4:2a:5b:79:8f:e8:24:01:29:33:
f9:2d:7e:39:9f:0a:85:74:bf:9a:e9:6a:b8:6f:b9:
34:c1:f2:aa:e5:90:ec:10:77:d1:28:1a:c1:e9:3f:
9b:e9:a0:1f:40:07:0e:c4:31:ae:8f:05:0c:33:67:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0C:BF:D2:CB:65:AE:90:A6:B8:79:5B:23:B8:84:9B:43:20:73:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
X509v3 Authority Key Identifier:
keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:7d:f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:c1:80:4a:91:e0:9c:e0:c2:6a:51:17:14:56:67:25:2c:d4:
78:d8:35:4f:83:b1:3c:4d:11:37:c4:4d:16:50:8c:0e:db:1d:
ac:60:12:6e:16:54:10:d7:e6:d7:ba:2f:a6:61:65:fa:9c:3a:
a8:e3:d5:02:22:9b:1f:90:39:28:df:e4:65:cc:7d:3e:d0:08:
ca:d2:cb:e3:41:5f:9d:dc:ad:ab:29:ad:ba:d7:aa:25:a0:39:
85:fe:9d:cc:09:1d:18:bc:28:d0:98:8d:05:95:c0:dd:75:47:
a7:93:e3:11:16:1c:c0:6f:60:78:3d:3a:25:6c:fb:70:4c:55:
bb:45:73:52:03:ce:4d:76:44:ff:38:88:7d:bd:d3:e5:d1:94:
61:85:fd:91:90:9b:2f:42:54:80:be:76:3d:47:21:83:c6:ca:
91:be:f1:e7:00:b6:ef:bc:6a:df:d1:fa:a2:f7:5f:05:ad:14:
bf:fb:41:dc:ec:6f:7b:78:4c:13:de:ea:68:02:85:3e:d4:aa:
fe:99:f3:6d:80:74:8a:55:9d:30:8e:7f:69:10:17:1b:aa:c4:
08:02:3c:50:04:26:b8:3f:6e:7c:3b:57:51:4c:f7:cf:b0:bd:
69:59:49:c3:d7:03:89:b3:86:f5:95:27:40:49:db:7f:d9:91:
e4:f7:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:23 2025 by rpki-client