Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/f5a670e7-0b2a-3d19-ab24-de24bc74805f.roa
File: f5a670e7-0b2a-3d19-ab24-de24bc74805f.roa (raw, json)
Hash identifier: nRjGYJ7vEU9dI7ifUnFphd+1nvYrTOfW1UmjVhoSO6c=
Subject key identifier: 3E:85:EC:46:2C:CC:59:51:7E:09:0B:1E:DA:4E:AC:A3:79:EF:D7:30
Certificate issuer: /CN=0432b247-64bf-4a12-bc99-32dbce58a455
Certificate serial: 010D0C9F4328584838854AC31D6412ECC59A8900
Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/f5a670e7-0b2a-3d19-ab24-de24bc74805f.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 2620:104:2041::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:4a:c3:1d:64:12:ec:c5:9a:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=f0e04ae2-53c0-455c-b0df-ba172c5569af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:a6:f5:9f:d5:5d:e5:40:26:ff:dd:60:56:
a1:7a:6f:a4:f5:33:6e:9e:a5:ad:b5:da:a3:53:c7:
a8:64:55:54:cd:3d:ac:37:04:d6:b8:71:5a:a7:67:
a6:cd:d9:e8:ea:2d:26:d3:07:c9:99:cd:84:29:02:
f0:50:d2:be:dc:f7:4b:27:b0:10:ed:08:ca:e1:8b:
5b:a6:ff:66:90:1a:13:af:e8:65:5d:75:50:a8:37:
c8:15:29:48:e3:4c:f8:4c:cc:49:f5:6a:e7:b1:08:
9f:81:8d:e7:a6:b5:67:52:8a:9a:94:f2:e8:73:07:
5c:d0:9b:15:d9:63:ac:08:9e:3d:3a:75:8c:db:38:
c3:ed:54:9d:93:9e:61:7f:f8:7a:ce:94:89:8a:95:
ac:5e:f0:6f:4c:23:ff:8c:18:f1:b5:e2:18:32:4e:
4b:e6:8f:2c:8f:03:7d:71:d8:19:af:94:35:f4:d1:
8a:e2:8c:92:25:a7:29:b7:e7:dd:20:7f:f8:b2:7f:
87:05:fc:3b:34:b6:21:6a:c8:96:15:53:85:3f:90:
f3:65:08:11:67:df:be:31:22:9b:06:d6:d7:67:20:
68:a2:11:61:ae:35:c1:da:14:f6:b1:64:80:6d:03:
02:1d:37:f8:b5:d4:6e:1e:6d:ab:0d:95:7c:51:7e:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:85:EC:46:2C:CC:59:51:7E:09:0B:1E:DA:4E:AC:A3:79:EF:D7:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/f5a670e7-0b2a-3d19-ab24-de24bc74805f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl
X509v3 Authority Key Identifier:
keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:104:2041::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:3a:b2:9d:6e:26:f3:06:e6:cc:c7:76:02:24:35:20:ee:f8:
cf:30:75:e2:33:a3:9b:77:b5:8f:da:a5:67:28:d6:85:00:e3:
c8:78:42:1f:9b:c0:8f:f8:72:40:32:44:06:29:93:ba:7e:0e:
35:6f:13:c9:5c:79:19:aa:ce:9e:02:9f:d4:0c:47:a5:ad:07:
31:0d:d6:47:a5:ac:34:67:8c:88:64:3e:41:ab:6d:86:34:ba:
4c:44:f4:72:ee:b7:e8:f7:11:03:b3:16:97:46:2c:5e:a6:79:
f0:2a:92:1f:8d:51:15:4d:a7:93:5f:69:fc:bc:2f:16:79:e2:
e2:f4:76:b4:6f:32:ff:70:2f:55:3a:79:27:31:90:96:a2:8e:
72:0b:df:d2:89:dd:17:60:64:34:be:ab:d4:81:bf:6f:eb:63:
d2:51:3b:7c:26:a0:f0:1e:c8:8d:5e:1c:8d:6b:c1:9a:27:43:
c5:69:41:19:91:1a:7f:b4:a2:0a:cc:72:ab:88:18:26:59:41:
27:0b:9f:60:aa:a2:5c:9f:d3:81:4a:7d:ae:af:66:ac:fc:29:
08:53:ae:d3:1e:ab:7b:e6:3c:a1:4d:bd:fe:7a:6e:cc:ee:eb:
f7:b5:14:c9:b3:6b:8f:66:be:b9:9b:45:4a:dd:ea:c4:94:d6:
2d:b1:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:30 2025 by rpki-client