Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
File: 5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa (raw, json)
Hash identifier: PhW4H+l5YPQGLV9T+zia4SFtAh2d57xsrSazTOiqVzo=
Subject key identifier: 45:2B:59:22:A9:5E:71:01:77:4B:D2:99:8D:9C:4A:53:97:6B:90:49
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328584854701E1C3A360EE1A0906780
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 33208
IP address blocks: 2607:9a80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:1e:1c:3a:36:0e:e1:a0:90:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=c788b526-668b-4285-9ef7-51f109121a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:19:f7:41:fe:c7:35:87:99:6f:06:fe:5d:
b5:f8:45:f1:3f:86:9d:72:8e:d9:95:45:68:3a:ad:
33:43:26:39:dd:6e:a1:7e:8a:b5:1d:5e:fc:2f:0b:
44:48:cd:a7:46:58:80:2a:8b:f4:c2:78:66:41:50:
bf:de:12:d0:68:3d:2e:f8:72:73:e4:36:b6:17:11:
00:ea:35:bb:e2:f8:17:56:f5:c2:fd:ab:3e:df:f7:
28:97:fb:8f:55:3a:b4:b6:df:8e:d4:f4:0f:1c:78:
f0:e8:0a:93:5a:66:3b:58:2d:59:f2:d8:18:5c:ed:
f6:af:69:43:85:75:e3:37:67:42:5c:0c:ef:c7:43:
cf:1e:d4:03:50:89:09:b6:88:5d:7d:a5:dc:b2:81:
a8:03:a4:f8:4c:62:67:50:18:74:94:66:15:35:f2:
7a:d7:23:cb:8c:35:bd:c8:41:49:53:7b:1a:f7:98:
f7:62:c3:a2:99:f0:52:9c:b9:f8:a1:46:f5:07:c8:
bc:35:f9:88:25:a4:9a:00:f9:9d:c3:43:39:8f:a4:
50:8a:90:6f:2b:8a:35:ea:86:94:a2:7c:26:e3:71:
3f:be:c3:63:0e:b6:e2:f7:84:74:ad:f3:3d:bd:38:
3c:dc:28:2b:0e:58:29:ae:42:60:ba:25:4e:f8:d7:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:59:22:A9:5E:71:01:77:4B:D2:99:8D:9C:4A:53:97:6B:90:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:9a80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:8a:75:33:e0:66:f3:7d:6d:d7:b9:f8:76:d7:85:e2:e6:f2:
71:96:48:0f:2f:93:10:1a:1e:06:36:82:7f:6c:f7:df:3d:b7:
da:77:89:86:1d:1c:b1:d4:26:99:54:51:35:76:86:08:48:36:
fc:bb:61:0d:d8:55:10:5f:dc:df:28:c1:d2:c8:84:02:68:c4:
4b:9c:b5:fb:e7:8b:38:91:f2:1c:3e:cc:cb:90:e7:8a:5b:d5:
6d:59:6b:24:fc:6b:3a:38:8f:d0:a9:0b:53:f0:45:95:b9:8b:
99:b1:89:19:62:5a:9f:59:23:34:41:c8:d4:4b:e8:44:d9:a4:
3f:0e:1e:40:69:ec:d9:4a:f4:07:b1:af:6d:54:6e:1c:c0:5f:
44:3f:3a:61:12:6c:c0:e7:1c:c3:c0:41:99:60:6a:75:14:dd:
d2:36:0b:8a:8d:66:20:40:d7:06:e6:3d:f0:b1:67:e4:c7:e6:
67:fc:56:8c:b6:72:2a:d6:90:22:f0:5c:06:75:c4:e8:c3:2b:
71:8b:be:15:5e:7c:42:66:9c:cd:4c:e0:7e:86:27:78:1e:16:
a0:8b:52:d4:ca:29:7a:34:1a:97:a8:6d:2e:3e:1e:cd:23:aa:
00:45:6b:dd:40:31:83:46:4b:24:c1:0a:38:38:21:88:6d:7f:
65:fb:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:36:39 2025 by rpki-client