Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
File: 5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa (raw, json)
Hash identifier: vNVv0cvYhAdqD4MURCDWd9/R+GdDfW/7o0NX9SGAlw8=
Subject key identifier: 0D:96:CE:3A:99:C5:F2:C0:4A:F4:2B:5F:C7:DC:00:F6:1B:58:9B:54
Certificate issuer: /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial: 010D0C9F432858486C2B0E118B7FC7D8F4DAE3E0
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 396204
IP address blocks: 2620:22:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0e:11:8b:7f:c7:d8:f4:da:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=c0a6b454-d9f2-4f1e-be34-3fb6054460ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:d4:3a:15:25:7f:47:e9:43:a5:c0:e7:3a:
e1:0f:58:8e:6f:1e:68:92:a1:df:e8:3d:6e:4c:44:
1b:fe:c3:48:0b:38:7f:1a:51:2a:e1:27:94:18:46:
6f:42:e5:ae:5d:ca:63:00:f5:fe:2f:09:42:f3:43:
34:38:c0:51:7d:17:04:5a:20:7a:fc:0f:9a:1b:5a:
19:bc:3a:14:2f:14:26:7d:8a:d4:b3:9a:e2:da:53:
05:c8:60:2e:48:9a:1c:9d:39:74:8a:b4:c3:42:3a:
c6:2d:9b:e8:bc:9b:40:38:15:54:1c:02:5b:14:6a:
db:ff:87:3c:fd:b5:bc:b4:a0:a7:4c:35:7a:9a:ec:
d0:e0:f2:e9:26:f8:18:d8:cb:39:f7:c3:23:82:8c:
c1:4f:1b:be:86:52:47:69:5d:4c:3d:dc:33:67:7a:
73:9a:71:44:d6:ef:48:4b:12:b3:e7:57:d8:5d:b4:
73:7f:35:ad:56:3c:43:ea:ec:e1:b4:e5:56:5a:79:
e1:e6:87:d7:de:43:a5:87:8d:ee:7e:79:e7:4f:4a:
e2:c9:68:92:03:6c:e6:bd:1c:5c:cc:e0:f9:ab:f1:
45:00:37:cb:17:36:5f:94:b4:6c:12:fc:6e:78:4f:
f4:2c:ed:c3:51:44:09:05:b4:43:e4:a0:ed:21:97:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:CE:3A:99:C5:F2:C0:4A:F4:2B:5F:C7:DC:00:F6:1B:58:9B:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl
X509v3 Authority Key Identifier:
keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:22:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:83:4a:8f:2a:28:08:23:4e:6e:5b:6e:23:ae:cf:c9:68:ea:
a4:b1:47:1f:41:69:73:bc:71:bc:af:6a:80:91:cc:bf:3c:4f:
74:e2:de:a2:d2:d9:f3:2f:f1:45:81:ee:2d:fa:89:8a:25:84:
c1:07:07:33:ea:ab:da:4b:70:22:fa:53:4a:a5:3c:07:99:4d:
f5:83:34:97:ee:19:55:28:17:d2:4b:fd:02:cf:d3:2b:18:24:
36:6e:51:f6:87:ed:af:40:06:b0:30:7e:fc:a3:4b:8a:98:50:
0f:ad:13:56:2b:f5:3b:fa:2f:71:75:cb:a8:0c:d3:6d:8c:7a:
bd:df:42:ba:f1:00:7e:f3:5f:9b:a4:8b:e5:c6:f6:24:7c:01:
f2:fc:da:b4:36:0a:73:fc:3c:b9:99:7f:58:f7:12:9f:78:0a:
f8:cf:7c:3f:65:94:31:ce:d0:70:a2:c0:df:05:68:25:31:a9:
11:e3:60:79:fd:76:32:6b:89:6f:dc:17:dc:ef:d8:7e:2a:7c:
7a:71:6b:0e:3a:f2:bb:78:b4:5d:5d:fd:5d:78:20:13:e2:55:
fa:fa:3d:fc:38:bd:62:a0:62:e3:72:09:02:36:87:b8:cf:11:
6b:43:9c:e8:78:e7:df:09:4b:07:db:12:f3:9a:59:9a:c2:bf:
49:87:27:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:51:40 2025 by rpki-client