Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/1596ae36-3c0f-30e4-a13e-883c51c53644.roa
File: 1596ae36-3c0f-30e4-a13e-883c51c53644.roa (raw, json)
Hash identifier: 7uzxNVZKTKEb7VXnGLorrsHeHEVVdI9u5s0foFDzff4=
Subject key identifier: 03:0D:AD:0B:89:86:E7:6C:19:C6:50:1A:EB:9A:D0:6A:84:C9:22:39
Certificate issuer: /CN=abc86be5-9cd6-4d5e-9867-b4d57b3b5c76
Certificate serial: 010D0C9F432858483F803A7D152A9D789EE67180
Authority key identifier: F9:E1:1B:A9:78:B0:19:FD:B6:8D:25:34:2D:48:D6:91:F4:BC:34:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/1596ae36-3c0f-30e4-a13e-883c51c53644.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 15296
IP address blocks: 2620:25:6000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3a:7d:15:2a:9d:78:9e:e6:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc86be5-9cd6-4d5e-9867-b4d57b3b5c76
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=e459b554-7a57-4592-b586-0b0a3c14c000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:6d:cf:a1:25:0b:f8:ac:47:60:42:f0:e2:
5b:6c:82:7f:2e:9b:2d:a7:0b:47:e1:70:88:cb:ad:
3e:61:b3:fd:b3:90:64:7e:a7:8c:4d:42:66:93:e4:
fb:9c:2f:68:ee:71:16:70:67:29:66:21:66:0e:a8:
04:0c:59:2e:fd:f9:2d:19:42:3e:e0:92:a0:47:44:
90:27:13:b2:2e:66:84:f1:0f:d8:51:1d:fe:be:a6:
d9:87:59:49:3e:a2:21:de:d3:96:2a:39:e9:b1:2d:
26:74:00:23:dd:92:d2:8e:ae:4d:c2:cd:c2:20:05:
cc:94:25:19:4c:2c:43:52:5c:e8:c7:34:3d:59:2b:
fb:2b:42:52:8f:77:16:d5:b8:b8:ab:4a:2a:0f:c5:
d7:c6:17:67:2a:46:20:22:f4:ef:fb:cb:fe:43:e0:
48:b8:51:bc:16:ae:54:54:82:96:41:a1:65:27:2d:
b2:32:68:42:16:3d:61:82:70:84:50:ca:a4:3e:97:
da:49:c0:60:6e:c6:8c:eb:4a:80:0a:e7:bb:fc:d2:
45:f8:c9:64:96:ae:99:eb:7f:08:8b:0f:ed:ce:94:
b3:35:0d:11:b3:01:66:b6:ae:24:30:36:90:6e:aa:
c0:74:fe:48:77:c9:9b:e7:0f:e0:d6:b8:98:79:38:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:AD:0B:89:86:E7:6C:19:C6:50:1A:EB:9A:D0:6A:84:C9:22:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/1596ae36-3c0f-30e4-a13e-883c51c53644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.crl
X509v3 Authority Key Identifier:
keyid:F9:E1:1B:A9:78:B0:19:FD:B6:8D:25:34:2D:48:D6:91:F4:BC:34:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:25:6000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:01:bb:e6:47:77:9c:7b:3e:a7:66:8f:db:70:2a:8f:f0:4c:
d0:44:46:55:35:61:7a:8c:5f:31:59:8f:1e:19:54:f3:79:ad:
56:0f:aa:27:3e:e4:dc:c0:75:fc:93:7d:18:99:05:05:0b:bc:
4b:ec:6b:fd:69:a1:9e:f9:a1:5a:96:a0:83:5a:1a:fb:7a:ab:
19:97:7e:31:b1:fc:ed:8f:0a:dd:2f:e7:54:d2:ea:3c:1f:dd:
9d:5c:06:6f:4a:0c:d4:c7:6a:9a:cb:8b:f8:2c:b7:ee:3d:a0:
7e:c1:1c:7b:2e:22:c6:2f:2d:03:74:bf:30:5f:07:1a:e2:ea:
9a:b1:33:b6:5f:f3:59:d6:46:32:14:1b:57:29:7a:3c:44:38:
6c:20:4b:2c:bd:00:51:85:ab:4f:c2:fb:f9:fd:01:15:15:f2:
d4:eb:39:bf:19:36:71:16:3e:36:61:4e:62:9f:10:af:32:76:
60:06:13:cd:b4:7d:7f:73:65:a2:58:c2:fc:52:43:97:8e:20:
43:ab:f6:14:0b:cf:3e:76:57:2d:81:21:d2:fe:11:21:d4:4f:
9d:dd:72:88:66:4d:c6:a3:f9:19:9e:9f:76:3c:c9:69:9d:ac:
19:9f:5b:b2:d8:53:99:b8:d0:25:6b:10:e4:9d:af:0d:fc:eb:
c0:1d:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:19:37 2025 by rpki-client