Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa
File: 0f107f23-47ba-363f-a704-3d575b31c8a9.roa (raw, json)
Hash identifier: +eCEZF/L3aiR+XQhoilevVeJd9GhvY2YrVSS/+ZDPRo=
Subject key identifier: CB:57:F7:F0:9D:B2:D8:1C:68:16:F2:00:F5:95:65:AA:69:91:C9:A1
Certificate issuer: /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial: 010D0C9F43285848696061B240A61BB174020030
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 23122
IP address blocks: 2607:f558:800::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:61:b2:40:a6:1b:b1:74:02:00:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=8c033e01-3d1a-4232-8059-61844a5c68bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1a:ae:8a:4e:0d:9c:66:d0:0d:9c:fc:c5:9d:
aa:16:2a:af:25:84:fc:25:6b:95:24:a4:dd:1d:9d:
93:b2:0e:9e:35:23:b6:2f:ca:96:ef:ec:64:3f:d4:
82:5c:74:44:9e:3d:d7:00:e5:4e:a6:6f:aa:b6:21:
b7:16:1f:8c:6d:d1:52:49:9d:0a:89:45:85:c8:36:
30:fc:82:62:b4:4d:39:a9:ff:9e:dc:77:2c:be:60:
2e:0a:c0:f5:f8:4a:ee:9a:57:07:d0:de:11:3b:73:
f7:79:34:b9:6e:9c:e3:1a:bc:d6:7c:19:56:73:00:
70:76:0b:fb:ba:2c:22:18:a8:97:12:77:b4:7a:6a:
34:91:c3:05:03:f3:a4:de:3a:0e:c3:6d:8b:23:0d:
02:2e:e5:88:b0:d4:7e:90:63:48:81:31:26:91:bb:
3d:93:52:5d:c8:62:56:bd:0f:fb:68:cc:aa:17:0d:
83:9b:77:8d:6f:cc:18:a6:3f:6a:65:71:c3:3c:45:
0b:d8:fa:b3:bb:59:12:81:69:ce:38:b2:97:31:92:
1a:ac:de:19:3a:14:94:65:ae:59:5a:df:a9:42:e3:
23:3e:93:28:10:5d:eb:42:8a:c3:94:27:bd:36:1b:
f1:43:7a:66:d5:72:01:2c:08:68:7a:1c:d0:54:8c:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:57:F7:F0:9D:B2:D8:1C:68:16:F2:00:F5:95:65:AA:69:91:C9:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
X509v3 Authority Key Identifier:
keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f558:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:1b:8b:07:19:3a:49:36:d4:0c:3b:9c:83:2b:ff:03:0e:10:
a3:e9:ce:a0:9c:75:07:86:03:4c:c0:d5:b0:48:37:3f:6c:98:
77:e6:49:26:c3:43:e7:39:5b:60:c8:45:7c:da:15:be:b3:9e:
92:07:0f:00:80:51:91:fc:17:25:a1:75:70:54:f6:dc:1d:b9:
6e:9d:10:c8:70:df:bc:37:cb:53:34:d2:c4:84:ca:71:92:88:
cb:f8:88:02:2a:be:9d:cd:04:59:4a:49:fa:0d:ab:c7:44:97:
4c:75:1b:22:63:ca:fc:c0:26:50:b8:df:9f:51:41:e8:5b:a3:
d1:38:e3:a1:49:2a:68:8d:64:e1:46:90:7f:e1:81:b9:68:28:
60:72:1f:86:85:92:34:a7:ab:4a:12:54:ec:eb:e3:e3:d2:f8:
75:44:24:1b:9c:6b:3f:43:9d:8c:4c:3c:2c:d8:a4:18:2c:96:
25:07:b6:ed:eb:15:f6:90:09:d4:34:1c:29:99:fd:d3:02:7b:
b0:3b:8b:63:f2:eb:17:ad:66:d4:48:88:cb:ac:40:69:3d:10:
31:c7:ee:53:d4:3d:b6:11:06:42:60:49:95:7c:c0:fa:26:1f:
90:e6:8a:f2:87:8f:1b:a9:eb:e5:bb:42:39:51:a4:b3:e0:99:
21:89:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:21 2025 by rpki-client