Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
File: 35c6001a-b4fa-378a-ac14-5506718c4e2b.roa (raw, json)
Hash identifier: Z6TXTgTSRnJ3i5QE5TzJnm1SBJTpDPZdnj8zaHc6zUY=
Subject key identifier: B9:30:08:BC:7A:64:ED:A6:D4:7D:24:40:84:07:01:AF:2C:5A:36:89
Certificate issuer: /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial: 010D0C9F432858482BF54C63BB1072761C5DDE90
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2620:121:5080::/43 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:4c:63:bb:10:72:76:1c:5d:de:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=73d7e923-60e3-45dd-afac-b0286d3b58a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:2c:83:48:59:ef:52:7e:2b:65:db:67:10:
80:56:85:f2:cd:3e:46:b3:1a:d0:97:d5:42:4b:4d:
09:b5:57:69:cb:52:eb:35:43:ca:97:07:ae:62:fd:
77:c4:7c:3d:70:d6:3e:54:df:01:ae:05:bf:52:a8:
69:d5:b8:9b:c8:f3:81:7b:84:33:c1:aa:2b:94:74:
bb:2b:5e:45:55:90:13:62:d8:1a:97:44:2c:39:a7:
4a:23:40:2a:f4:37:a8:3c:53:a3:d9:8e:91:82:00:
eb:40:35:07:c9:f1:db:75:3f:4d:3c:ba:04:70:16:
6f:d3:fc:ba:da:41:85:82:d7:75:75:ef:c4:07:a5:
77:75:5a:2b:62:6a:a1:fd:e7:9c:22:14:e7:71:6d:
0a:9d:85:e2:52:3e:a2:88:10:3f:54:6f:8b:8a:51:
d3:18:5c:53:ae:02:f4:13:54:67:d6:69:61:1c:a2:
3d:96:b2:cc:97:75:9f:3d:39:b5:89:fa:60:47:2e:
af:ae:94:3c:2b:88:59:33:14:f0:0b:2c:a7:0d:51:
c8:0a:f7:2f:37:aa:86:77:40:c4:16:96:f2:13:2b:
65:2e:fd:10:9b:f8:28:55:e2:25:7c:ae:78:73:da:
66:d3:ed:00:7f:b8:46:a5:15:c0:8d:ab:bb:49:ae:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:30:08:BC:7A:64:ED:A6:D4:7D:24:40:84:07:01:AF:2C:5A:36:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
X509v3 Authority Key Identifier:
keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:121:5080::/43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:1b:f4:55:3d:68:1d:7e:72:82:b5:d2:92:24:16:fd:ab:a5:
11:d7:2d:1e:95:5b:77:9c:38:aa:8a:9b:69:c0:58:83:05:cd:
83:31:59:81:fb:f3:aa:c7:af:03:15:c2:af:c6:ff:6d:f7:53:
02:d8:bc:99:1f:cd:a8:f9:7c:d0:df:d6:43:05:cd:c1:b1:07:
d1:43:83:0a:b6:bb:51:3a:0a:9c:7f:07:87:2c:50:cf:52:15:
eb:25:11:62:1d:24:31:3c:f6:8b:12:07:bd:be:58:cf:8b:db:
56:82:bf:e1:ca:24:d8:b1:49:36:89:00:c0:12:5a:18:e4:9c:
a8:91:27:93:b1:4b:68:d9:d2:9f:62:94:9b:8c:46:3f:8d:b8:
0b:80:f4:40:c6:91:1e:9d:0f:4f:77:73:51:99:f0:bb:ec:97:
1e:08:bb:4f:3e:25:ed:b1:e8:fd:3a:54:3f:d2:1f:ad:f6:ec:
af:75:c8:80:82:33:a7:bd:f7:60:9e:16:5b:25:41:60:b0:1d:
bb:68:04:f8:3d:d4:ea:88:c3:1c:92:b9:23:67:c4:55:08:34:
c3:e2:f7:b5:49:cb:95:9f:e9:d7:2f:49:ab:4d:46:e5:a7:7e:
48:60:47:08:46:47:e7:e5:e9:e1:08:fd:5d:37:f1:00:68:97:
ec:55:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:24 2025 by rpki-client