Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b54f9863-0d1c-3492-bffe-413827f91a2c.roa
File: b54f9863-0d1c-3492-bffe-413827f91a2c.roa (raw, json)
Hash identifier: ydMwp46lzhB1OYRYXxPzUJE4WdZBsLGc+pkKqohA1Zg=
Subject key identifier: 1F:33:03:69:DB:DC:FD:F9:D1:81:26:EA:B9:F4:0C:B7:9A:BB:3B:4E
Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial: 010D0C9F432858480BDA6FB2493FCDE5C8438300
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b54f9863-0d1c-3492-bffe-413827f91a2c.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 0
IP address blocks: 2001:504:61::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:6f:b2:49:3f:cd:e5:c8:43:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=8ab247aa-6943-4235-9281-a5cfb73f386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:be:d7:3b:dc:ae:40:5a:de:67:9d:29:01:
f1:e3:e8:fd:f3:84:76:85:55:00:7c:79:5f:36:69:
54:37:72:52:cd:df:c6:a6:de:e7:7b:8f:b7:99:f4:
0e:b0:e8:d9:c7:bf:3e:da:62:49:63:91:e7:a9:a8:
42:68:f8:78:af:22:04:f1:bf:83:f0:63:6d:fa:dd:
b1:49:b6:b7:25:8a:85:80:1d:25:ee:d0:58:7c:56:
b9:e2:4e:44:e9:60:53:17:ba:cc:ea:87:46:79:ea:
30:af:13:a9:a0:50:15:0d:6d:a7:2b:78:3e:37:a0:
d5:48:17:6d:76:67:51:f4:55:ed:0b:c3:61:58:a3:
41:2b:93:ba:63:d5:7e:24:3b:a3:a5:d3:8d:d5:bb:
98:82:f3:28:4b:fd:0c:86:d6:60:f0:0c:1f:95:5f:
b6:7c:25:81:c1:24:79:cc:86:09:bc:47:5f:6f:3e:
5d:fe:e5:d1:55:ae:89:0f:51:3a:57:16:51:e6:6c:
72:14:a7:f4:0d:15:f8:d8:ae:35:aa:62:8e:7d:db:
d5:c3:79:01:b8:27:b9:62:9c:fe:b6:37:83:0e:5c:
cf:8c:b7:05:bd:84:32:ef:6a:b5:d1:0b:4b:78:6a:
a7:55:1b:3f:d1:d7:ea:35:5b:68:cb:c8:3c:af:1d:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:33:03:69:DB:DC:FD:F9:D1:81:26:EA:B9:F4:0C:B7:9A:BB:3B:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b54f9863-0d1c-3492-bffe-413827f91a2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
X509v3 Authority Key Identifier:
keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:61::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:07:89:a4:04:3d:dc:a5:b7:a6:25:cf:1a:21:ea:1d:68:88:
aa:97:00:c6:68:e8:d2:34:ae:f1:88:5a:4d:00:69:3b:a6:34:
60:f1:ab:5c:cf:fe:69:8b:ea:6b:23:cb:26:00:33:36:53:b6:
0b:65:c5:74:7a:b6:a6:14:4d:7b:64:24:9a:28:26:8f:dd:3d:
f3:9c:92:69:ae:10:33:40:ed:30:50:f1:85:82:ef:a4:2d:67:
58:e7:76:9e:a2:e7:58:28:27:53:04:f9:3e:a1:b6:6a:30:12:
d6:5b:03:e2:90:f9:3b:ca:0a:c4:5b:a3:5b:c1:a1:e1:9f:a7:
54:a4:a2:2b:ce:7f:dc:da:bc:23:3b:77:0f:13:ed:58:ac:9a:
e5:d6:69:cf:d6:5b:05:55:c6:e0:c7:fa:7a:72:3f:aa:50:66:
4c:cb:c8:97:92:0f:67:f0:f9:2a:9d:08:87:d3:ac:af:54:3f:
a3:38:25:16:a5:88:40:da:64:12:a0:b9:2d:04:6b:e9:3b:b5:
53:c8:21:c2:c1:7b:27:e1:03:d0:fc:ed:3a:00:4b:8d:6e:89:
37:96:82:ce:f4:bf:03:a3:95:66:fa:17:2d:17:10:c8:4d:90:
9d:5e:a9:d2:89:6a:29:ea:bb:d0:c4:60:d0:aa:83:8d:7a:23:
65:26:4e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:49:15 2025 by rpki-client