Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/84b5ebbd-36db-33a7-9ad8-ea1338e1d9c9.roa
File: 84b5ebbd-36db-33a7-9ad8-ea1338e1d9c9.roa (raw, json)
Hash identifier: mi78dmmVWhZhKlGGWJ9vJ2rv6xMZxyf4jzAp/LpFeK4=
Subject key identifier: F5:EE:34:B4:47:32:4D:94:64:B0:9C:C1:C1:2A:94:C9:EB:C1:7D:FC
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1AB8C3504C3EC6F2624E80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/84b5ebbd-36db-33a7-9ad8-ea1338e1d9c9.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 2001:418:1c01:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b8:c3:50:4c:3e:c6:f2:62:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=24cfccd5-1a03-4f88-8d5e-81b7ca85ef8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:49:b3:92:ae:a8:50:49:28:eb:51:83:a3:
e8:36:8f:92:a4:20:89:aa:2d:84:e0:9c:22:37:dc:
86:74:54:38:91:2d:f5:6f:78:c2:26:81:cb:06:9f:
63:a1:87:f0:9b:47:9a:97:8c:bb:cd:4f:c8:0d:63:
1d:80:8f:2c:8d:be:20:a4:bd:19:c1:a9:4b:9b:d9:
be:73:bc:fb:0d:25:94:1b:67:98:06:f7:f5:77:8a:
f1:d2:66:c7:fc:37:b2:37:e3:83:73:9a:23:62:e5:
4f:3a:07:50:1f:57:9b:7c:db:c2:8b:fa:60:83:35:
e0:4c:f0:26:39:95:24:02:ac:21:be:97:06:36:93:
53:32:6b:ca:76:65:cb:86:59:f8:1e:b1:e4:5a:81:
9e:e4:6f:eb:70:0c:aa:22:dc:7d:43:43:d1:7b:51:
61:95:ab:39:e4:ac:e4:cc:ea:c3:e1:79:03:dc:90:
e1:8b:25:70:95:42:ea:97:70:43:ca:fd:4f:a0:db:
63:d3:36:de:0c:05:33:d5:97:9c:69:80:a2:60:e3:
35:62:25:2d:49:38:22:2f:a2:b2:42:b9:27:59:c5:
35:1d:e2:64:85:27:ae:c9:c2:28:70:61:aa:ea:64:
8b:0a:3f:75:a3:4f:5c:34:bb:44:3f:4d:f8:27:f8:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EE:34:B4:47:32:4D:94:64:B0:9C:C1:C1:2A:94:C9:EB:C1:7D:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/84b5ebbd-36db-33a7-9ad8-ea1338e1d9c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1c01:1::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:c1:6e:f1:73:3d:0a:a8:5e:4e:39:4b:47:0f:16:ab:e1:f7:
a2:7e:97:44:60:3c:a5:4c:53:8b:10:42:45:78:75:2b:a9:10:
ce:25:4c:e3:c7:17:31:da:ce:3b:97:cd:a3:77:ef:c7:ad:a0:
99:3f:92:74:dc:37:50:89:1b:b0:ff:53:92:c9:82:72:5e:51:
75:41:f4:7c:64:b6:4c:61:f8:db:49:50:0c:35:2e:e2:b4:80:
78:08:3d:ec:4d:88:e7:31:f9:84:02:18:12:0d:c3:43:6d:81:
86:e3:b8:2d:d1:e8:28:ba:38:48:a0:9e:32:55:31:9c:64:c2:
d7:63:ed:97:e1:ef:f4:7c:ba:e7:1b:cc:e9:1e:86:44:b8:b8:
77:52:c5:77:fc:4e:33:a7:c2:99:d2:ab:5b:3f:b7:e5:e8:dc:
6b:7a:60:e1:77:c1:96:a1:4f:8e:4c:58:6d:08:f6:4e:7f:fa:
da:98:5d:b3:80:0d:f6:57:3b:7e:1e:f4:20:71:24:8b:cb:f0:
e4:44:e7:34:a6:18:fc:2a:92:ed:b0:f8:c1:e1:cd:2d:d8:1b:
4b:e0:da:3e:71:9a:f2:c7:27:fe:8f:bb:d8:6f:a4:bb:a0:ba:
d5:7e:6f:f5:a9:6f:c7:f4:49:f6:12:13:c9:f8:ea:0d:02:79:
0e:2b:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:22 2025 by rpki-client