Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa
File: 72c6a5fc-5997-3514-aaa9-9d610df32949.roa (raw, json)
Hash identifier: 2eJkkNhNSJa4YWO76rNGMFjklY2qLC1z7zbs0726hs4=
Subject key identifier: 5C:ED:E3:F3:BD:36:17:05:4D:4D:CC:07:18:47:E2:2B:9F:D8:C9:F2
Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial: 010D0C9F43285848424ADDC1E43D6AB82B1B2900
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2607:28c0:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:dd:c1:e4:3d:6a:b8:2b:1b:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=995e9c55-d3f4-48d2-9b41-af5d92c231d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:f6:87:80:d3:50:46:3d:b0:c8:c5:4c:eb:
47:62:18:52:a9:20:99:21:39:76:10:6c:41:b6:ec:
33:84:26:d4:1c:37:25:8d:f7:ea:70:cb:18:45:4d:
ed:a2:01:00:08:63:39:16:09:6f:f5:4e:fa:04:0d:
b2:ae:01:26:bf:86:c8:a9:94:37:8e:4b:a9:52:e0:
3c:37:61:ba:19:bd:5b:69:9f:f0:bc:2c:fc:6b:ec:
02:c7:b5:15:2d:33:d1:34:a4:c6:89:63:d3:95:88:
84:8d:e4:77:3d:cf:1d:f2:e7:4f:38:d5:71:34:e0:
66:58:c1:38:b7:a3:fb:3c:9c:fd:d2:d4:ed:74:d6:
3a:e3:80:ef:c8:42:14:8a:73:33:85:a1:d0:a5:c4:
27:b7:96:49:cc:5c:80:c3:26:18:a4:b8:f0:18:b4:
e3:84:ce:e3:0e:12:05:97:5a:e6:d1:ff:4c:25:dc:
15:85:2d:41:38:21:2a:9e:73:f5:a9:47:d6:8f:ef:
39:3f:44:1a:72:9f:c7:35:29:0d:75:a8:64:2f:3e:
50:f1:4f:36:d2:50:5e:d2:1e:57:eb:8e:9c:57:46:
5f:b4:c2:07:d2:a9:73:5b:78:ff:3a:b8:99:54:73:
62:b8:4d:11:e1:12:38:cf:45:41:cc:35:1c:c3:09:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:E3:F3:BD:36:17:05:4D:4D:CC:07:18:47:E2:2B:9F:D8:C9:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
X509v3 Authority Key Identifier:
keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:28c0:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:88:8b:55:cb:9e:86:47:64:f0:27:9a:06:15:cf:0f:98:7d:
aa:14:65:5f:40:4a:9f:f7:48:28:ea:98:74:34:39:da:c5:25:
3a:15:f8:2e:c0:ca:bf:52:09:5a:fd:df:ff:d6:6b:8a:be:26:
8f:82:31:a1:b0:4f:80:3b:93:ee:60:81:c8:e9:ac:87:c5:d0:
2a:42:98:be:cb:74:87:d6:f5:4d:6a:61:65:99:8a:59:29:76:
29:01:4f:4c:6c:40:b3:84:c7:49:da:26:f5:89:82:3b:7c:9e:
2a:e6:5a:46:0e:d0:ac:46:e0:77:4e:5b:21:7e:af:b9:59:48:
dd:e5:ef:97:cc:98:83:5d:2c:2c:4e:33:47:c0:f9:77:09:f0:
70:9b:99:77:d3:bb:a7:1e:20:56:1c:80:18:17:6c:72:97:29:
c7:5f:90:67:c3:84:ab:65:74:02:49:ae:7a:8e:12:10:82:06:
19:07:68:4a:cc:a1:2a:e4:9e:b9:d5:8f:f1:83:08:1a:36:b4:
a4:98:74:8d:2d:67:a9:f9:4f:29:f9:76:01:d5:f9:e7:86:81:
b0:0c:ad:07:77:ae:5b:76:cb:ad:f2:8e:25:90:35:95:23:78:
58:c1:d2:c5:3f:d0:8d:7c:b7:93:fd:1d:fd:fe:a2:ac:57:d6:
7b:f4:b5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:11 2025 by rpki-client