Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/caf6aa8e-d631-3fbb-870f-a75e6211190f.roa
File: caf6aa8e-d631-3fbb-870f-a75e6211190f.roa (raw, json)
Hash identifier: 4ajupNSY612vdAoBMzqgcp6B91yqN3c6Rn3O5rgXJkk=
Subject key identifier: 5A:0E:CC:A3:7A:9C:5F:78:D8:DF:64:E3:C2:34:BF:1E:28:1F:6F:70
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA17FCE7E49FA9EC3A140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/caf6aa8e-d631-3fbb-870f-a75e6211190f.roa
Signing time: Wed 11 Dec 2024 15:18:08 +0000
ROA not before: Wed 11 Dec 2024 15:18:08 +0000
ROA not after: Tue 11 Mar 2025 14:18:08 +0000
asID: 396588
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a1:7f:ce:7e:49:fa:9e:c3:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:08 2024 GMT
Not After : Mar 11 14:18:08 2025 GMT
Subject: CN=a10d2d61-1dce-4191-a1a3-884f182c2397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:08:d0:c0:21:58:08:a6:dd:ba:d1:47:1c:
6b:d1:39:cc:60:cd:72:e9:2c:e7:2d:5f:4f:02:57:
ab:42:74:9d:ca:d5:a9:ba:bc:2c:53:78:51:38:b3:
ca:dd:25:1b:c3:96:51:b8:5e:42:ed:3f:82:5b:3a:
bd:59:d4:ad:2e:39:ac:80:01:24:58:7a:72:df:ac:
f2:e6:91:bc:54:87:6d:31:03:df:a3:d5:de:0d:f0:
a4:4b:17:1a:73:14:18:ec:c8:b1:eb:78:2f:97:33:
48:93:ac:06:8b:7e:79:2e:a3:2f:99:86:e0:54:08:
a8:c1:e7:e9:a0:6d:1c:6a:01:82:54:3c:35:30:7d:
95:49:98:68:57:3d:9f:0e:6e:f6:f7:58:93:3a:bd:
e0:04:5d:02:a3:d6:03:d8:7f:95:28:4e:95:0e:a9:
e7:f1:25:a9:c2:81:f0:96:ba:3d:2a:ae:7c:42:f9:
57:9c:16:56:3e:00:9b:74:23:da:4b:82:3e:55:09:
47:dc:7b:f7:35:eb:f3:54:c4:61:65:8f:97:70:a9:
83:bb:33:f9:ed:9d:ce:70:cb:ad:c9:28:3b:53:00:
83:c5:1a:5c:17:c9:9c:8e:a4:e6:11:4e:96:0d:f6:
8b:af:dc:2b:e4:df:14:d1:2f:a0:a7:30:e8:aa:d9:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:CC:A3:7A:9C:5F:78:D8:DF:64:E3:C2:34:BF:1E:28:1F:6F:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/caf6aa8e-d631-3fbb-870f-a75e6211190f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:70:0c:64:4d:f7:41:14:d6:c0:3d:5a:9e:57:21:b9:4f:af:
25:c9:22:ec:41:60:43:18:20:67:68:e0:e1:38:65:08:2f:b9:
2a:a2:2a:4b:63:6f:34:f9:0e:0c:04:54:8e:d3:d1:34:ea:fb:
05:c2:cb:24:24:06:d6:b3:13:13:d2:8a:ca:b5:a4:fb:80:4d:
2d:07:b8:34:86:64:d0:bb:7d:cc:67:f7:d7:6b:4f:3e:71:60:
75:c3:61:e4:96:a8:7d:51:08:02:8f:43:08:d7:c3:28:1c:92:
5f:46:81:e2:c5:17:9a:22:cf:30:6a:d3:30:31:18:74:ab:45:
da:b4:dd:66:51:91:ed:29:8c:64:60:f4:11:32:1d:72:95:5b:
f4:f1:52:f4:f0:72:54:3e:6a:03:9d:55:0b:ca:a3:14:92:8c:
b1:e0:88:be:de:7f:8e:5e:59:f1:78:20:04:a8:1b:e6:45:11:
eb:a8:50:d1:5b:ef:bb:f2:45:1b:7c:09:51:17:af:51:51:2a:
b6:6c:a4:a9:2b:15:90:af:de:61:76:3c:05:31:c1:52:28:f8:
f2:b1:bc:1b:35:80:92:5b:dc:05:c4:95:d4:f1:a1:26:fc:24:
6b:af:bc:d0:a6:a7:76:5e:e2:c6:69:0f:55:0e:18:22:b4:13:
cb:4f:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:39 2025 by rpki-client