Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa
File: fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa (raw, json)
Hash identifier: nF5M5coXVR9C6/5qwYg9pCY1eFchCK36fqrmuu6GMf8=
Subject key identifier: AB:6A:1D:4E:A2:43:43:10:92:DB:72:56:4A:22:BB:A6:1E:AE:4B:D1
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F432858485470227497828453C54A7200
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 198949
IP address blocks: 2607:9a80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:22:74:97:82:84:53:c5:4a:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=0f790397-0a36-40a2-957f-6cfe48575b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:81:c3:40:73:eb:e2:5b:b5:13:dd:19:f7:
3c:58:43:5f:57:e9:8e:e3:6e:98:10:14:1d:3e:08:
cf:ff:93:42:8a:e6:43:ff:29:77:23:3e:d5:3c:30:
82:ab:da:fb:c4:5f:2b:00:71:72:78:c9:44:0b:69:
59:95:20:8e:a1:61:a5:bd:6c:53:f8:15:ff:32:6a:
ea:96:07:0b:ef:29:48:5b:7c:35:bb:a7:7a:aa:64:
fd:03:13:b7:1c:63:a6:2e:6b:23:61:81:17:95:c4:
65:87:45:4e:c9:0b:2b:ab:22:f2:23:43:ff:1d:4f:
40:20:6c:5e:a6:25:90:ed:21:6d:55:6f:3e:57:94:
a8:d3:f0:49:7e:66:0f:97:7d:bf:48:c0:e7:f6:df:
c2:e8:88:66:40:46:69:2e:30:4a:ae:9f:22:72:06:
9c:b1:6c:e4:c2:d8:21:e3:15:4d:69:25:9b:43:30:
de:b6:88:a6:37:96:f1:19:e8:06:74:86:a7:3b:25:
91:0a:dd:d2:bf:50:90:53:bb:c1:5d:91:0e:c7:40:
70:b8:e0:42:13:b3:7c:20:b0:6d:66:60:da:02:32:
4e:a3:66:71:b3:0b:f1:4e:77:29:c3:6d:e7:24:9c:
63:a0:7e:3f:7b:07:25:dc:0a:6f:e1:11:49:08:7d:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:1D:4E:A2:43:43:10:92:DB:72:56:4A:22:BB:A6:1E:AE:4B:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:9a80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:7f:be:8f:ad:01:47:d8:9b:5a:87:39:fc:72:0a:6b:0b:9b:
b0:7f:42:07:42:63:3f:54:68:fc:69:5a:ad:6e:47:2b:0f:7f:
c0:21:cd:2b:d6:30:a8:18:76:ee:22:0e:0d:d1:87:f6:bc:96:
50:af:fc:a1:d7:68:a6:5c:9a:63:bc:26:dd:64:29:3c:47:d0:
87:b1:e1:2a:6e:44:0a:cc:31:b1:42:82:0c:e9:ba:bc:85:ab:
62:80:41:99:58:0f:c8:a1:ad:61:ae:f2:38:ca:ae:68:a6:70:
07:93:69:80:c0:4d:0a:39:09:3b:77:6d:d5:e9:66:b3:06:99:
05:97:7b:f3:2f:6d:21:83:57:94:5c:55:a2:e5:43:2e:6c:ac:
e0:aa:9b:18:4a:62:81:8d:a7:a3:91:fe:9a:a8:ca:1c:59:87:
7d:90:ed:38:c2:c3:b3:80:df:df:90:54:ef:e9:be:64:65:e0:
04:e0:2c:ca:27:18:67:5c:de:d8:41:02:27:56:e3:e8:4d:55:
8e:84:77:fc:77:a4:31:49:0a:0c:c3:9f:16:04:fd:97:c9:41:
83:49:63:ea:e7:88:6c:79:3e:e6:fe:ec:41:cf:cb:03:d3:b5:
07:a0:7a:ad:4d:c7:01:a7:dd:80:c5:95:93:13:a6:f6:5c:29:
9f:42:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:52 2025 by rpki-client