Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa
File: 9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa (raw, json)
Hash identifier: W9pXgzSgFgYithTLC0Q0LGWBtGPwGFxk7r3OVXp0u2s=
Subject key identifier: 6A:3D:D8:93:FA:B9:FB:8B:FF:87:AA:46:A7:C3:D0:E1:05:76:28:89
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F4328584832F01E02A8986D0AFADF5820
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 2607:d540::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:1e:02:a8:98:6d:0a:fa:df:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=0a681909-44a7-4f0e-bc8b-d64871284a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:01:81:0e:6c:51:83:d3:85:7a:4f:73:33:
d0:a9:05:da:54:6d:14:4a:87:9d:59:2f:cf:38:ef:
fe:0c:4a:26:7b:6b:2f:b3:2a:70:8b:c0:a8:de:80:
e5:0c:1f:e1:cb:d9:bc:6d:6c:5c:5e:c3:3e:5c:7d:
4b:5a:29:9f:35:fe:90:bb:86:00:c7:5f:4d:da:fc:
bc:8b:97:6d:c8:89:20:49:b5:5f:0a:f6:90:79:05:
51:2e:e7:bd:66:a5:72:c5:2b:08:37:48:98:64:9e:
7c:5b:f6:cd:2c:ca:ec:d0:cc:af:c7:e0:49:0a:83:
2e:34:c4:68:38:72:81:23:d3:52:0d:3b:e9:d0:91:
2f:fd:88:a6:e0:05:e7:f0:35:e3:07:e9:81:a5:04:
cf:a8:23:06:b5:65:d4:49:83:39:9c:51:0c:21:ab:
b0:2e:be:ef:27:80:c2:d6:67:2a:e9:ae:17:f1:e4:
2a:c5:04:d2:85:f2:cd:16:76:13:40:f9:da:96:90:
de:68:f2:60:7d:84:89:f5:5e:b3:46:20:ea:d4:32:
3c:3a:6f:02:1c:15:be:42:61:39:8e:87:2f:a9:9c:
17:7b:79:a6:75:52:66:53:43:1c:2d:e3:0f:f4:7e:
e9:7c:3a:7b:3a:db:ad:fc:07:d9:33:aa:d0:c7:e1:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3D:D8:93:FA:B9:FB:8B:FF:87:AA:46:A7:C3:D0:E1:05:76:28:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:d540::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:26:2d:c7:98:ef:75:da:80:59:dc:0a:87:1b:95:4d:58:ca:
70:22:ce:b4:d2:75:a4:78:b7:00:06:3e:02:0a:0b:88:a3:b9:
36:7a:f7:9d:ba:1b:d5:27:50:1c:44:69:34:ce:d6:cc:28:d4:
d6:53:3d:e0:96:b5:99:5e:e4:34:42:ec:92:22:52:b7:91:9e:
22:10:42:13:41:4b:4d:c1:c5:11:f1:f0:54:bb:50:bb:c4:5c:
9d:9a:4e:d2:85:f0:47:4e:97:b0:ee:27:30:7c:04:ec:50:9a:
6f:58:ad:f8:e6:5b:56:7d:d6:57:ba:44:0e:43:3a:b8:a6:6f:
b7:5c:a6:4f:70:2d:f7:87:cd:98:a5:eb:74:ba:e5:81:b0:39:
59:3f:c7:b2:6a:f7:11:8e:be:12:45:ac:c6:26:fb:9f:52:3f:
22:4c:53:a1:63:ee:6c:e4:e4:16:99:bd:0e:b5:5a:02:07:b4:
e6:e9:2e:8e:11:af:a9:91:fe:a6:ca:1b:06:2b:48:7f:8d:52:
78:fb:5a:f2:c4:ea:b5:8c:df:d4:a6:c9:41:f5:dd:5e:06:f0:
fb:9b:a2:df:63:27:b7:dc:95:67:cb:51:f3:7e:a0:d5:8a:33:
4c:65:4e:44:cd:0b:0c:ae:6e:46:88:4f:0f:ab:a7:fd:77:81:
80:e1:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:12 2025 by rpki-client