Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ab2f454f-c997-318b-aa66-9b35c7bd22b8.roa
File: ab2f454f-c997-318b-aa66-9b35c7bd22b8.roa (raw, json)
Hash identifier: iLVIhKIZV6pkoQnObxtqwuYxDMpdZjAR0M6t9Oao1M4=
Subject key identifier: 0F:29:18:67:66:87:7B:EE:14:82:A1:A5:E0:CB:68:49:67:BC:8A:0D
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F4328584820CA920DB8AE6F6B1A052780
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ab2f454f-c997-318b-aa66-9b35c7bd22b8.roa
Signing time: Sat 07 Dec 2024 14:00:51 +0000
ROA not before: Sat 07 Dec 2024 14:00:51 +0000
ROA not after: Fri 07 Mar 2025 14:00:51 +0000
asID: 45652
IP address blocks: 2607:f180:7100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:20:ca:92:0d:b8:ae:6f:6b:1a:05:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Dec 7 14:00:51 2024 GMT
Not After : Mar 7 14:00:51 2025 GMT
Subject: CN=b13260a6-6460-4069-bf0e-5e72e870ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:75:0c:95:76:57:c7:0d:6f:c0:3e:58:86:
81:fc:ab:8b:cd:21:74:72:4f:71:af:d4:29:1b:ef:
4b:eb:2e:15:26:87:d1:4f:98:09:d0:a0:fb:93:cc:
18:d8:db:36:56:f1:6d:9b:0a:72:34:f9:e5:b2:37:
5a:fd:0e:28:4f:a3:2f:77:d1:eb:a6:b1:00:d2:eb:
c1:04:8a:0a:b4:ea:96:63:b1:a9:6a:34:0f:d6:b0:
5d:88:64:f4:7f:d2:68:d4:08:1f:88:9a:fb:e6:e1:
4d:2a:0b:fb:6b:35:fb:3d:87:f4:ee:9b:bc:28:da:
4f:ec:b3:2a:38:37:06:6d:e8:3f:c4:10:b5:09:51:
6d:a7:17:a8:59:8c:94:1e:09:de:97:ad:fc:5e:fa:
07:83:84:89:6a:70:57:af:05:aa:2f:39:ca:ae:13:
61:42:b3:d2:b9:3b:14:f5:bb:11:3f:8b:bb:00:25:
e2:43:af:a7:12:d0:a0:64:dc:6e:d0:b0:3a:22:87:
9a:01:29:6e:e8:fb:6f:89:37:7b:60:09:97:be:f0:
0b:b8:4b:cd:5b:65:ee:ca:21:00:4a:c0:45:27:e3:
dd:f7:5b:43:e0:88:75:37:b1:32:cb:29:58:81:6f:
20:9b:4f:d5:03:ab:bd:27:a7:f6:e4:ec:e2:b1:02:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:29:18:67:66:87:7B:EE:14:82:A1:A5:E0:CB:68:49:67:BC:8A:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ab2f454f-c997-318b-aa66-9b35c7bd22b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f180:7100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:3c:bd:3e:1b:e1:ea:e1:42:66:9e:9b:f5:b6:f4:82:bb:2b:
c5:d6:5d:c4:e9:a4:4b:dc:86:04:0b:9f:ea:5a:5f:91:1a:b1:
3e:24:8c:2b:52:9a:db:54:67:cd:a0:e4:36:05:d4:e0:b4:e4:
a5:62:ec:53:57:db:da:1f:81:4d:c0:2e:eb:e3:d5:0d:41:ce:
d6:da:a0:be:59:02:8f:24:71:93:c8:78:b3:5e:54:3f:6e:88:
22:79:da:f5:61:7c:4a:82:2f:de:6c:cc:0e:94:61:b8:ab:2c:
b7:c9:ca:2d:44:81:41:d7:c3:8a:fc:57:42:a0:6f:e0:df:d3:
fd:45:a5:49:e0:84:33:dd:cf:e5:23:6d:e4:43:f5:ed:fa:a6:
bd:f6:62:94:88:bf:2c:8d:78:02:aa:ea:e0:69:50:ca:1d:1f:
22:82:f1:a0:ad:91:56:f5:cf:c7:86:c1:75:c9:cc:e5:a5:a4:
ae:93:50:f8:46:d2:35:14:b1:40:df:fc:93:e0:31:6a:47:e3:
7a:53:8c:3d:55:a3:21:3b:e3:d0:9c:fd:0c:7e:03:8a:b3:17:
9a:ee:2b:57:1b:af:9d:f4:d7:7f:98:3e:46:e9:eb:91:c7:db:
c6:21:0b:86:33:fa:73:8a:7c:8e:0f:70:8b:95:2f:f5:50:1d:
9e:f7:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:24 2025 by rpki-client