Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa
File: aff36023-01d7-3371-9cba-b3d40a4f342c.roa (raw, json)
Hash identifier: F0Ac1HBpurq0MbUS1tRDzSF0PYVejrld7kL2W2aIhzs=
Subject key identifier: C9:A5:CD:8F:CC:52:05:09:53:49:03:80:37:37:07:8A:FA:ED:14:0C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584839EAC8B53F29B53B75F23B00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 20940
IP address blocks: 2001:418:1401:71::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c8:b5:3f:29:b5:3b:75:f2:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=f67db0ee-91ee-49da-b7e0-dc3a1e0d7b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:67:30:65:4a:0d:9e:25:f9:b1:ca:a2:81:
48:23:e2:19:37:90:9b:88:5c:bb:d1:90:55:02:df:
e8:82:37:71:a9:16:5f:a3:7f:2a:39:2f:a5:d7:af:
28:4e:b3:c9:ca:de:8e:70:de:79:ea:a4:3a:cd:e1:
43:9c:dc:d4:a4:2e:68:a4:91:d6:34:9f:5e:5d:d8:
da:8b:b1:a0:91:77:6c:dd:d9:78:17:a6:b9:08:36:
d9:0d:8a:5a:15:28:b6:b4:65:12:ed:08:57:66:e4:
67:5d:90:5c:08:98:a4:3e:86:8f:d2:6f:c0:56:f8:
b0:b8:46:80:b9:a1:e2:a6:af:b6:e9:20:8c:1b:44:
64:80:fe:63:9a:d3:64:85:84:be:06:12:1c:07:81:
d1:b0:4f:d2:e4:6b:5c:06:75:23:c0:3d:cd:c2:89:
ad:03:50:21:ac:86:60:ab:8e:96:6c:36:a3:1f:89:
6f:53:69:0b:80:59:78:30:f3:ab:bd:45:cd:ea:05:
20:3a:da:24:34:c9:7e:b5:3d:3b:64:d2:a8:e2:1b:
94:01:92:4b:69:c6:14:9c:ae:79:61:c5:46:49:d4:
81:3a:5b:c3:5e:5d:a0:ba:8e:7c:83:71:2f:a5:8e:
f5:f0:e5:10:86:e2:57:9a:8f:04:e3:af:32:16:91:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A5:CD:8F:CC:52:05:09:53:49:03:80:37:37:07:8A:FA:ED:14:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1401:71::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:50:2d:1a:52:d1:f4:f6:f4:1e:4b:6b:d4:8f:73:99:b5:b8:
09:f6:c1:93:8a:d5:6c:3d:e8:c2:43:36:26:c4:71:dc:6f:9e:
68:5f:85:90:44:f4:77:8a:9a:49:70:ae:c0:8c:05:6d:89:be:
00:0e:d2:b7:9e:ff:0c:f0:da:ad:cc:26:82:ba:fb:47:6d:a4:
ce:65:45:1f:04:5e:08:31:52:c6:e6:b7:66:b4:39:d1:98:35:
5a:b7:74:93:83:1d:99:c3:bd:7a:05:8f:fb:f6:2d:0e:4f:de:
39:d4:bf:e6:a2:2a:72:ec:81:11:62:15:58:88:fc:0c:de:24:
13:7e:19:fc:d2:b3:4a:ce:b2:43:6a:91:9a:1d:93:43:eb:3f:
e9:a8:dd:ca:85:5f:98:a1:b8:92:e9:5a:c9:e3:ad:dc:b4:b3:
5e:80:54:e2:19:b2:0b:eb:ba:1a:b7:ce:50:52:a8:f7:d6:2a:
e4:da:bf:78:2a:37:50:7b:4b:55:28:79:96:05:82:07:48:a7:
79:43:21:05:16:77:f2:aa:3b:83:fd:c2:e4:3f:90:37:7b:c4:
f2:a4:20:f2:00:84:28:30:6e:52:f8:05:39:c8:63:af:0c:6d:
1b:67:e8:ca:41:0a:90:4e:32:c4:1c:43:8e:21:48:00:3f:2a:
ef:55:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:15 2025 by rpki-client