Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa
File: 905b2441-7479-30ff-970e-b1f710dbcbbc.roa (raw, json)
Hash identifier: +cnlJaRCATDV8KPxc/RiZRiElpQJGv1jmhtWKdV/ynk=
Subject key identifier: D5:BD:58:F1:7A:AF:3A:83:F7:F9:97:37:1F:6F:72:A1:A8:15:F6:76
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B60BAA4447D08D0EE44F0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 852
IP address blocks: 2001:569:6fe0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:60:ba:a4:44:7d:08:d0:ee:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=4baacc50-ddc2-4a5d-9b97-d899c1538f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:9f:87:c2:22:b5:f8:dc:93:82:04:8b:ca:
a3:a3:17:7d:4e:bb:da:6e:16:c4:c9:c5:64:93:0f:
50:39:f3:46:16:24:93:83:02:f3:bc:61:ef:b4:df:
d3:26:36:16:36:45:d9:ec:16:7a:22:d6:c3:f7:0a:
7c:03:9b:88:a8:07:5a:92:47:cb:50:26:8e:0f:c1:
41:21:48:62:9e:47:0d:cc:51:c0:ea:39:b1:48:60:
55:4c:45:ba:19:fd:2a:6c:fc:85:41:fd:26:c9:68:
20:64:0a:a2:fa:c4:29:53:ca:57:d6:45:c6:ac:73:
69:4b:97:cf:39:6b:aa:93:09:e5:83:87:06:de:bc:
18:59:ab:bb:50:fb:c9:51:75:98:37:21:fa:d2:66:
52:50:34:d1:ad:5e:f5:45:a7:0e:e6:69:94:75:fb:
b6:06:28:7b:1b:e3:11:e8:9c:85:5d:5d:08:7d:13:
a9:3a:3b:3f:eb:84:98:9e:0f:61:4d:a2:c1:2e:04:
15:10:08:d9:2f:11:14:92:af:ab:bd:4b:f4:0c:62:
06:74:1f:63:b5:54:fb:89:9e:3b:7a:eb:53:51:d7:
98:c6:64:51:6b:b3:6d:80:a0:67:29:01:96:f4:69:
16:34:c8:4e:ac:84:9f:3a:85:ad:5f:8d:1e:87:1b:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BD:58:F1:7A:AF:3A:83:F7:F9:97:37:1F:6F:72:A1:A8:15:F6:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:569:6fe0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:e6:d3:13:7a:22:70:bc:01:17:e6:c5:c9:01:c6:80:de:5d:
f0:a3:c3:38:12:4c:5c:81:ac:f0:84:d7:74:82:09:92:5f:55:
9d:60:8c:25:cc:a5:57:48:55:4d:07:0e:cc:fe:be:03:d8:ec:
36:76:3b:8e:68:70:9e:66:f7:e1:c4:09:ed:2e:f7:51:7b:8a:
28:da:ea:7a:d9:14:7f:fb:9b:ec:c2:48:eb:68:8d:76:d2:9c:
8a:9f:2d:10:e3:80:37:f2:e5:47:41:0d:13:9d:27:1b:ef:39:
d2:74:2b:8b:4f:45:18:f1:09:70:c1:a3:a8:06:fe:ee:8a:36:
76:14:7b:db:c8:e0:02:78:9a:0b:d8:43:fa:da:0d:f0:52:3a:
ab:fe:05:4d:de:23:44:23:95:d4:6e:20:e7:82:28:1b:16:06:
8f:fb:03:a4:b1:9c:55:6f:6d:6a:d5:28:42:8c:5e:5e:a4:ad:
5c:97:31:13:54:1d:87:b7:9f:0e:84:a7:df:20:09:3a:0b:76:
6a:28:c6:42:42:e6:c5:6f:97:b5:01:09:a1:ff:00:18:91:4e:
4b:ca:88:ba:89:e5:8d:1d:9b:fd:d5:9c:ed:9e:bc:ac:31:04:
a3:5c:33:82:81:48:2a:33:a4:a0:ff:2d:af:83:4b:4e:c1:0f:
6e:1e:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:26 2025 by rpki-client