Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa
File: 91a0f82e-0c80-3031-8728-18426dbe1fb0.roa (raw, json)
Hash identifier: KSLksXgoGt88aBFcDHe5ifVy1vBXofN4yTudaPGf3Tc=
Subject key identifier: 3B:10:A7:F3:40:26:0E:EE:EE:50:B2:56:A6:F8:41:E0:05:86:B6:45
Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial: 010D0C9F4328584861004BE4171A6D305EC4D4D0
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 20473
IP address blocks: 2604:4540:80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:4b:e4:17:1a:6d:30:5e:c4:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=70f99aaa-07bf-49e0-bb6e-51a397c05d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:ac:43:7d:6b:2a:08:56:5d:49:92:c5:cd:
5f:3c:46:c7:e4:a0:e4:47:8f:85:65:ca:42:26:06:
e5:d2:49:93:45:c1:04:45:84:37:03:7d:2a:c3:83:
af:b8:a2:ec:88:97:62:79:35:01:2c:cd:65:55:d8:
84:d4:a9:7e:ed:90:da:5f:bb:45:6a:45:ab:d3:f2:
6b:99:b6:0d:f0:0a:62:1d:3d:1c:96:cb:1b:59:52:
83:86:bc:cc:1a:06:3a:6d:8e:bc:ec:84:ca:41:e7:
1a:fe:0e:e1:b1:05:3a:1d:0f:c4:73:4d:57:68:3c:
c0:14:5c:f2:ad:b6:c5:16:d3:7e:d2:75:ed:24:ef:
0b:9f:8c:7d:63:cd:6f:35:31:ff:74:a6:48:6a:7e:
13:a0:db:1e:52:bb:f6:7e:95:b6:80:0c:98:6c:d4:
e7:9f:76:6e:dd:1e:48:9d:28:66:28:6b:00:47:e2:
fb:ae:48:b3:9f:18:39:56:42:8d:fa:a2:30:48:5c:
86:b1:12:25:ef:58:d1:1d:97:3b:78:af:e9:a5:4e:
0f:b2:d0:98:b8:9d:33:04:ba:bc:b5:2c:d0:67:44:
94:0a:cc:e2:86:d2:28:34:d2:61:b7:06:25:d6:ff:
6d:09:cb:54:40:0d:80:fb:fc:b0:b3:13:46:72:f7:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:10:A7:F3:40:26:0E:EE:EE:50:B2:56:A6:F8:41:E0:05:86:B6:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
X509v3 Authority Key Identifier:
keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4540:80::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ef:d8:63:aa:e7:4f:8b:ef:34:cb:e7:e1:18:92:61:f0:4b:
6e:3c:78:8c:20:44:3f:5c:ef:01:f0:58:8e:eb:45:64:9b:cd:
0b:cf:ea:e2:8d:bc:26:3c:aa:3e:cf:56:98:73:1e:28:12:17:
e2:d2:0d:62:cd:ae:c0:f6:38:1f:4e:58:e9:41:c7:dc:ac:01:
c1:4f:c0:d3:bd:45:5f:8a:70:8e:2d:13:0b:a2:b9:89:63:24:
86:6b:d4:58:19:08:b6:e6:2a:96:49:9b:58:77:1b:4b:45:b3:
29:5d:76:b6:0f:27:e4:72:f2:42:16:bc:02:6a:74:10:21:d6:
55:18:d8:7b:04:e6:3d:aa:5d:0e:ce:d9:45:09:ea:4a:8a:0e:
9b:23:fe:fb:64:6b:ca:0c:07:24:ab:2d:72:4e:2c:84:1d:46:
79:a2:69:ea:eb:dd:58:ad:dc:33:c0:24:af:fc:50:32:fd:62:
b5:9c:01:af:4a:25:81:76:5c:3e:a4:e1:1b:7d:8f:f9:db:15:
09:92:8d:a4:cd:54:f7:66:f4:a7:ec:0d:57:5d:18:98:3f:ce:
35:28:c7:ee:55:96:88:01:16:60:dc:c9:d3:71:b7:7e:9e:96:
88:00:fe:82:9c:2b:05:d0:1e:1a:d3:19:4d:0a:89:45:ca:f8:
8d:c6:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:42 2025 by rpki-client