Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
File: 0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa (raw, json)
Hash identifier: zOB4L3N6vHS0aedNju5zUuDeeI8sgUZLyE0WxTKPAro=
Subject key identifier: 27:E7:23:BF:47:41:D8:44:C6:62:B8:F8:AB:14:80:94:A5:E7:24:2A
Certificate issuer: /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial: 010D0C9F4328584867FAE7100229E997E5E4B800
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 31998
IP address blocks: 2605:ed40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e7:10:02:29:e9:97:e5:e4:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=b650cc01-dd49-4569-b55e-00d4eb4fc902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:9b:f7:25:e2:0e:94:44:59:fe:f2:75:75:
f9:fc:5a:54:b1:36:bf:8a:91:10:e6:29:9a:61:54:
5f:6b:3d:58:2c:11:38:8a:c8:58:21:d1:ea:81:5b:
eb:d6:66:e0:15:6f:f3:da:75:4a:02:01:12:40:47:
ed:a4:46:19:9c:74:5f:43:3d:be:05:5d:f2:40:97:
c4:4d:66:f6:fd:58:cd:80:d6:4f:a4:b5:23:db:90:
f3:1b:86:b7:83:8d:21:0e:80:f6:1d:ab:1c:46:8b:
05:b1:88:f9:10:3b:c8:dc:1d:4e:85:e5:43:af:5b:
e7:fe:55:41:58:58:50:70:80:33:32:9a:ba:17:05:
54:7f:ac:70:1d:b2:97:90:ca:b6:85:54:15:e0:fe:
cd:35:42:50:37:0a:bc:bc:fd:9d:e1:27:0a:80:fa:
fa:67:74:d1:b3:5a:ea:58:75:c4:4d:67:ac:a1:cb:
73:ee:bb:f3:f5:9a:31:79:4e:57:c9:22:26:44:a1:
05:83:5b:da:80:a4:61:e9:25:87:fc:79:4e:97:5f:
e4:9d:5d:69:30:19:b6:3b:78:6a:7b:af:9f:ac:31:
a7:78:c4:dc:5f:3f:d8:44:ec:c3:95:32:2c:8d:d5:
be:52:87:e4:1b:f4:ff:80:3e:51:3a:20:10:20:3f:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:23:BF:47:41:D8:44:C6:62:B8:F8:AB:14:80:94:A5:E7:24:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
X509v3 Authority Key Identifier:
keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ed40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:43:47:40:4b:00:01:81:d1:5c:db:77:28:28:8c:61:16:89:
04:fd:e7:02:06:1e:03:6d:31:09:24:8f:c5:13:a0:dd:60:92:
84:b3:69:41:f8:bb:a9:55:a8:25:a5:ca:78:c7:89:51:58:0c:
b0:98:8d:ca:1d:90:10:07:0e:4e:d3:f9:d7:d5:86:bc:ec:34:
53:25:45:3e:8d:68:68:b9:d3:ae:3d:70:ca:2d:98:6e:c9:29:
fe:05:e2:28:8c:7d:86:24:6f:a9:d1:0c:51:1c:70:08:3f:27:
5a:b6:e0:5b:cb:14:80:95:92:10:78:8a:7e:7b:77:80:af:a2:
8b:a8:54:07:03:a1:20:f2:d9:19:c2:7b:52:c3:54:6c:55:d1:
8c:a0:22:ba:86:43:a6:bb:1b:6f:66:fb:68:b7:4c:e5:26:43:
78:f7:33:47:89:28:0e:8a:4c:fc:1d:c8:1f:bd:f6:9d:72:23:
37:76:e7:3b:c1:bf:74:84:ab:38:34:20:f6:b5:ff:1b:e5:e5:
16:b4:45:09:7f:03:8b:c5:6c:2b:8e:97:45:b7:1a:b8:26:5c:
8b:0d:13:31:c7:da:33:a8:65:94:ba:c4:88:ae:60:8d:83:c1:
d3:66:82:69:44:47:7b:a2:ef:c6:81:6a:15:16:47:79:db:d5:
ef:5a:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:01 2025 by rpki-client