Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/a21fdbff-d1fd-3080-a4c6-a86d6081a023.roa
File: a21fdbff-d1fd-3080-a4c6-a86d6081a023.roa (raw, json)
Hash identifier: O/9GhBuYfictaaVXs3i6AkL+Uwu18W/Kh+CdAwMIhYg=
Subject key identifier: 70:C3:D4:7D:96:6F:DA:11:FD:34:95:96:5D:40:86:20:1F:4E:74:E8
Certificate issuer: /CN=94468bc3-3532-4788-950a-08cd97f124e9
Certificate serial: 010D0C9F432858482D5A92064EBAE2E4C58B189C
Authority key identifier: C7:EF:7E:0C:8D:4E:2A:91:B5:9C:90:61:7D:B2:44:35:50:4E:D5:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/a21fdbff-d1fd-3080-a4c6-a86d6081a023.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 397423
IP address blocks: 2607:8cc0:2333::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:92:06:4e:ba:e2:e4:c5:8b:18:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94468bc3-3532-4788-950a-08cd97f124e9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=f688ac58-4aeb-484d-8437-ce34ac331623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:b4:2d:ef:dd:45:3d:58:78:76:2e:c2:fd:
05:33:d0:a4:5f:a6:75:fa:70:31:87:98:c1:84:a3:
90:be:21:40:60:42:a9:24:32:90:f5:3b:f3:cd:bd:
4b:58:91:07:4c:6b:a9:1f:e5:3f:4b:91:03:63:5e:
06:18:90:11:f5:1b:dd:5f:26:fb:08:8f:29:dd:fb:
c6:ee:84:a5:07:13:b4:a5:1b:6f:0e:5c:39:24:84:
4e:c0:60:0c:4a:fe:9e:0d:d7:ed:eb:43:00:50:7e:
3c:9d:c6:51:f4:7b:25:dd:e1:c5:52:15:50:78:96:
b5:be:78:72:39:24:5a:54:4d:cd:47:12:8f:eb:20:
07:b0:d8:9f:7a:aa:43:16:82:55:57:8a:db:aa:f2:
43:cb:0c:9a:05:f0:90:79:39:ef:84:93:5c:a4:e7:
66:dc:04:b6:4c:21:05:09:98:06:0d:ca:4a:5a:92:
7b:89:9e:1c:4e:35:20:61:db:22:3a:01:ef:4e:dd:
f2:1e:1d:e4:65:28:fc:84:37:aa:d9:5f:3a:9e:a0:
a2:af:c5:13:d8:4a:6f:c7:7a:fa:eb:30:5b:06:2a:
17:a1:57:8c:20:8e:62:ec:38:6c:70:39:55:1c:5f:
da:40:3d:b1:b7:46:88:8f:59:bd:b1:bf:67:32:c7:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:D4:7D:96:6F:DA:11:FD:34:95:96:5D:40:86:20:1F:4E:74:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/a21fdbff-d1fd-3080-a4c6-a86d6081a023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.crl
X509v3 Authority Key Identifier:
keyid:C7:EF:7E:0C:8D:4E:2A:91:B5:9C:90:61:7D:B2:44:35:50:4E:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8cc0:2333::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:a6:7a:77:40:f0:f8:94:bd:9b:96:59:f6:dd:d8:26:46:17:
06:5d:3e:11:fb:de:21:84:fa:7d:35:56:14:11:1e:89:1a:3b:
a0:df:2a:04:d8:f4:03:79:5f:01:6a:58:49:66:4d:f5:96:5a:
d2:3d:55:50:7f:14:2d:1b:94:b7:17:a1:0b:d1:1e:02:99:15:
21:79:16:f2:79:45:af:c2:c7:36:e9:d0:92:d7:a6:4c:3e:da:
5d:de:e4:cf:30:d0:cf:26:05:15:f1:25:8c:94:8f:f1:b6:ca:
74:b2:ba:b6:26:d6:ab:4c:93:ee:a8:14:7a:4c:28:d9:e6:97:
24:45:60:69:4a:46:ca:b9:6f:dd:c4:5d:3a:b6:e3:52:92:fe:
cc:04:0f:37:ce:e3:73:72:84:76:df:c1:a2:05:98:86:76:7f:
a0:14:70:08:ae:17:12:89:f8:9e:a3:58:9f:ff:ca:d4:f4:e4:
dd:e7:46:0f:7b:18:3d:3b:a3:db:ff:1c:87:97:d7:72:7d:42:
6a:24:ab:de:1f:84:7d:e7:65:d6:c2:56:5e:f5:8d:2f:81:73:
47:82:df:93:95:15:81:d8:a4:f4:ca:4b:4a:b1:d9:25:62:0b:
72:7d:0f:f1:fd:9e:fd:7b:2c:34:97:6b:7a:3a:d5:0e:99:be:
ef:a8:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:22:10 2025 by rpki-client