Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/452cca3d-3441-3733-b0f6-c134a50240e8.roa
File: 452cca3d-3441-3733-b0f6-c134a50240e8.roa (raw, json)
Hash identifier: Lb7DJ6ntxnYAQY6GIqwlYl4rhFOWH1RCmxmvD2F7ZIk=
Subject key identifier: FC:78:B6:34:D3:E4:5C:A6:CE:07:95:B0:5E:A5:37:14:3F:ED:3E:E0
Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial: 010D0C9F432858486695C3D8BD97A1FF7DDA5C00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/452cca3d-3441-3733-b0f6-c134a50240e8.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 20473
IP address blocks: 2605:dd40:1b00::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c3:d8:bd:97:a1:ff:7d:da:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=16709e08-5688-49f5-8469-c8d3fe2a9fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:19:69:90:d3:00:ab:47:15:5b:4d:c6:a4:
eb:72:47:19:36:8b:81:fe:c9:3c:bb:6f:89:7f:5a:
3f:5d:10:a7:16:dd:f1:f4:e8:11:04:93:d8:ee:dc:
af:cd:0a:8f:bf:8e:ac:a7:fd:8a:b1:56:98:1f:a6:
d9:00:30:a1:e5:3e:2c:6d:76:87:f0:27:fc:a8:73:
7f:dc:70:55:0b:58:ce:83:7a:0e:c1:7a:f5:31:92:
15:8a:ca:f4:f6:02:b2:2c:5b:c3:cf:92:7e:db:93:
68:26:a3:ca:e6:ea:de:fe:b1:54:f7:43:dc:87:dd:
6a:1d:98:7e:7d:17:63:1f:45:ec:e7:15:38:f2:72:
02:ce:e6:76:a1:d0:66:62:ad:05:57:1b:21:c7:5a:
a3:0b:3a:a8:6e:60:be:e8:83:f6:d1:68:1f:63:6f:
f5:f0:75:5b:c2:14:e8:e3:f4:46:e4:5b:46:36:b2:
19:29:cc:85:c5:8e:76:e0:5d:9f:aa:e9:13:30:24:
37:e0:2e:a3:4f:05:d9:2f:6a:1b:0d:7f:ee:17:8c:
6b:f4:fd:7a:cd:97:ca:37:a9:06:2d:d2:e5:2c:af:
10:82:20:ab:5b:b2:9b:cb:cb:ad:31:fb:96:3c:a6:
6e:5f:8e:2f:50:a4:25:df:d2:3a:30:b7:84:cf:3e:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:B6:34:D3:E4:5C:A6:CE:07:95:B0:5E:A5:37:14:3F:ED:3E:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/452cca3d-3441-3733-b0f6-c134a50240e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
X509v3 Authority Key Identifier:
keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:dd40:1b00::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:12:ad:74:80:a5:4f:bb:9c:e9:bc:26:25:68:24:96:97:83:
b6:09:13:ac:bf:e1:3c:37:41:21:a8:4b:05:25:da:dc:c3:da:
3c:e6:15:b6:9e:40:ad:30:91:a2:c5:49:7e:49:8a:af:c2:02:
da:2f:7a:27:a5:d8:93:c4:d1:f8:46:20:1d:c3:0e:fa:f6:32:
4a:fd:26:95:66:86:51:d1:c6:54:cb:c6:8c:3a:94:93:50:9e:
65:48:09:cf:dc:ca:b6:41:d8:38:35:fc:af:da:41:62:97:c4:
bb:c0:4e:01:5e:f4:36:3b:1c:59:c3:56:6f:e2:7c:f5:c0:55:
7f:0b:64:ff:64:55:93:58:c1:76:46:46:33:48:35:bf:6f:63:
fe:67:73:e4:43:28:1b:45:52:df:e0:0d:75:a3:83:cc:95:bc:
57:3f:e7:2b:3b:e9:86:f3:ce:9c:a4:64:5e:21:50:3b:da:99:
86:b9:10:a9:94:4d:7d:29:38:31:2c:d0:33:bc:d2:e1:54:84:
9b:67:96:ff:f8:42:90:77:99:19:24:07:c1:f0:08:fc:a1:ab:
52:0e:4e:8b:13:c8:ea:18:5d:5f:ac:8d:a7:f7:f0:14:c7:9f:
a4:36:1f:48:8e:50:a4:8d:50:a5:5f:1f:e6:bf:b8:b7:99:a3:
aa:ed:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:59 2025 by rpki-client