Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa
File: 6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa (raw, json)
Hash identifier: fd8ijYnbq6RY4Fe62HW6dg7oulnLVKE65Ub7QPqRjcQ=
Subject key identifier: A6:11:4A:34:D1:58:D7:D9:63:CF:44:5D:6E:61:B8:F1:A2:16:BB:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B831FE5138137F94D19B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa
Signing time: Wed 11 Dec 2024 15:17:53 +0000
ROA not before: Wed 11 Dec 2024 15:17:53 +0000
ROA not after: Tue 11 Mar 2025 14:17:53 +0000
asID: 36627
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:83:1f:e5:13:81:37:f9:4d:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:53 2024 GMT
Not After : Mar 11 14:17:53 2025 GMT
Subject: CN=65ed52a4-fecf-4ee9-9226-56b76d1beef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:34:54:f4:09:e7:bc:65:94:b9:f5:c5:63:
aa:7e:bf:ae:1f:8f:07:c4:f1:c9:16:b6:57:8c:9c:
95:a9:9e:be:b3:84:d7:08:f8:a7:2c:2a:2c:92:15:
d8:8a:ec:e4:68:29:98:e3:43:cd:f5:71:f0:87:41:
10:a8:67:1d:7a:70:71:eb:5f:69:ca:25:91:88:00:
6e:ec:dc:a7:12:fa:21:3c:8d:ad:a1:21:a4:e1:31:
39:5d:45:53:7f:83:32:c8:18:35:ca:2c:ae:ff:48:
90:ec:9e:3d:02:60:25:9f:9e:7a:bf:d1:b6:04:d3:
d6:53:2a:1b:dc:29:ec:51:9b:67:d1:6b:ed:d5:66:
2f:f9:0a:8b:74:10:12:d0:28:33:4d:28:c5:10:1e:
aa:3c:76:48:db:1b:3a:a2:c2:ce:f9:95:2b:32:ed:
07:fc:b6:2b:06:2c:29:3d:98:30:3a:2f:e3:89:f0:
e5:ec:58:55:d6:b1:82:5a:6d:f8:ee:a0:ab:38:4d:
fb:de:ff:8b:cf:a6:a3:2c:d1:a5:32:02:28:fa:6d:
b6:c8:45:fe:3c:68:50:55:3e:cf:4f:7b:1e:0d:0e:
fc:58:ed:f7:83:b9:38:1d:13:cb:bc:41:70:6a:36:
89:83:7f:cc:dc:b4:d9:53:b3:35:fd:95:50:2a:b1:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:4A:34:D1:58:D7:D9:63:CF:44:5D:6E:61:B8:F1:A2:16:BB:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:41:6f:0e:d7:9e:d7:f6:05:63:14:4a:7a:b1:ba:82:c9:62:
96:9a:d2:16:c1:a1:e1:2c:16:d6:ee:c8:a5:41:cd:e6:ac:c9:
1b:91:55:0f:c4:cc:73:2f:1a:97:13:d9:e2:d5:a5:5e:d9:96:
b9:ec:b9:65:03:fc:db:50:db:cd:88:41:d7:53:88:15:85:56:
fb:a6:b1:c2:15:2c:81:04:b8:84:0f:fb:81:9b:26:06:bd:c6:
b4:34:56:19:1b:2d:9d:24:76:ef:96:64:1f:4d:34:d7:a3:e8:
d0:b0:4f:6c:3b:5c:a1:51:6e:a5:68:b2:a7:c0:6f:c4:35:67:
bc:23:f3:e5:eb:6d:f6:54:06:59:dc:91:4f:6d:00:f2:21:c9:
47:67:a7:8b:5a:c1:da:30:fe:80:bf:b0:4d:7c:e6:1a:48:19:
55:49:00:70:ca:d5:90:cc:02:3a:f3:46:d9:38:da:c8:ba:49:
2d:cc:26:45:94:62:13:79:e0:b4:7d:b0:7f:70:c9:a6:74:f2:
f0:c0:ed:e6:76:72:51:13:c0:14:13:62:09:75:5e:f8:e3:1f:
e5:b7:8d:ea:f4:c6:83:71:4c:43:17:25:8e:a3:a2:3b:4d:86:
1b:22:30:de:53:1e:20:d6:da:d3:fa:d0:8f:13:fd:d3:57:44:
da:a4:35:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:21 2025 by rpki-client