Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa
File: 41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa (raw, json)
Hash identifier: Az6V34MGbdQ8xkJwS1g+gURzCkrzoS0q7c1vrhxjuhk=
Subject key identifier: 66:6C:C7:1F:A2:09:89:EF:72:82:6C:04:87:12:A2:3B:BE:C6:9F:2F
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B62CDE74A1FB5D01FAE80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 852
IP address blocks: 2001:56b:9f0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:62:cd:e7:4a:1f:b5:d0:1f:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=4a4af62d-1221-4611-9c0b-1bf569c5de26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:90:7c:1e:d4:94:f1:b2:d3:c0:d6:1f:1d:
3b:7f:79:b4:bf:b1:e3:be:93:cd:a5:bb:9e:67:2b:
ef:35:27:ca:9f:2a:8f:58:50:4c:d9:91:08:12:27:
5c:48:99:58:be:04:f0:c1:67:51:30:a1:2b:19:f7:
a8:fd:b9:2c:64:df:d0:7d:95:82:d7:b2:91:8a:0f:
14:81:8d:50:e2:13:e4:98:c3:0d:be:ef:66:9c:10:
fc:1b:8a:5c:a9:9b:6b:0e:7f:c9:03:0d:92:ea:e6:
ae:31:37:0d:18:2d:be:c3:49:7c:16:42:02:d1:ee:
77:3e:a8:3e:cc:98:ce:67:1e:a7:fe:48:c8:e0:4d:
42:4c:ff:ce:a0:c1:11:7c:37:f7:1f:9b:90:f2:6f:
67:48:93:e4:0b:a2:ab:1d:38:6c:77:88:89:21:e5:
20:63:dc:a6:0e:5c:03:7d:ce:ed:ba:c5:93:f4:33:
42:9c:5c:0b:bd:3e:03:c5:33:b1:cf:8f:67:09:6f:
83:99:8b:23:81:0b:e3:22:4b:1c:6c:6e:15:ff:22:
cc:be:26:be:0f:a5:14:85:5a:e7:13:6e:dc:a2:93:
f1:7c:b1:e0:c7:48:e3:2b:76:52:e5:88:0a:e3:dd:
46:f0:9f:be:c1:45:7d:bc:6a:83:4b:41:34:bc:49:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:C7:1F:A2:09:89:EF:72:82:6C:04:87:12:A2:3B:BE:C6:9F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:56b:9f0e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
f8:39:09:2a:f7:dd:a7:d3:7c:5c:35:c4:49:a4:6d:1a:5b:61:
4c:e4:e9:87:40:d9:77:a9:59:04:ec:93:f2:d3:18:d4:fb:4f:
d7:2e:fb:d8:6e:b2:3f:b7:ea:87:a8:5e:26:0d:2d:b9:45:fe:
06:43:c3:1d:44:fd:14:4f:03:31:a6:ac:14:ad:85:dc:5e:f5:
ef:f2:44:51:2d:ad:e3:d8:df:1c:31:11:8b:66:34:49:38:9e:
1d:45:a3:7a:1d:10:8f:24:ea:92:68:ea:35:16:e3:46:5a:b4:
e6:89:28:9b:f1:6d:4c:24:f2:ce:71:1c:4f:fb:22:24:21:0a:
b0:26:a2:02:03:42:15:18:03:31:4e:32:af:b6:fe:70:b6:ea:
4c:92:4b:af:b0:b6:77:02:eb:6d:fb:9d:0c:49:83:46:3a:26:
ca:be:f6:35:e6:78:58:5d:89:0c:2c:2c:e1:5b:62:9c:03:3e:
2a:c9:25:e7:fb:59:b2:b8:2c:aa:1c:41:f6:6d:38:fe:a8:96:
ec:6e:02:7e:b2:b1:e3:ee:e0:54:70:ae:08:8b:55:86:71:ba:
61:0e:a1:ec:1f:80:7e:4e:39:53:ac:31:3f:d9:12:04:98:da:
cc:cf:71:f0:5d:be:f5:60:f3:d0:2b:cf:d4:52:aa:0e:90:4c:
ca:fa:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:21:05 2025 by rpki-client