Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bf97729a-6d0f-3fd4-81c4-8abdd64ac880.roa
File: bf97729a-6d0f-3fd4-81c4-8abdd64ac880.roa (raw, json)
Hash identifier: lFca6xT/gVE0Oi64EBg8H+sTU7mdH5qbH8/1GLZ+Jo4=
Subject key identifier: 17:BB:21:5C:7A:D6:AB:88:41:1D:25:48:F5:2C:55:C0:DD:2B:71:85
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF9B517B294C8DE0C23980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bf97729a-6d0f-3fd4-81c4-8abdd64ac880.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:8bbb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:9b:51:7b:29:4c:8d:e0:c2:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=28c920a9-a550-4a77-b84f-3f47a5157c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:16:8c:8f:37:0a:d5:41:75:0c:d2:97:e7:
e4:37:c6:92:c8:84:a1:4e:88:ea:0f:f2:3c:cf:e5:
40:4a:cd:4a:e3:da:81:34:d3:b4:0c:59:8f:b4:2e:
13:b3:27:ae:1d:e2:7d:8e:d0:7b:cd:6f:8b:47:9a:
d0:c7:3b:f5:9b:e7:d3:5e:8a:4e:6a:2e:1a:29:1d:
4e:3a:ad:98:94:c1:cf:e9:2a:2a:51:d5:dc:36:41:
2d:54:b8:d1:d6:2a:09:c0:fd:cc:5d:f6:6c:90:28:
46:e1:2d:38:64:9e:77:d2:03:c3:05:1c:d4:00:a0:
bc:f5:d1:3c:c9:dd:4c:74:31:d5:bb:9b:77:b9:b4:
0f:30:c2:73:a4:4a:95:80:ab:a8:c2:f0:62:47:f2:
88:8d:6f:f4:6c:1d:b1:c7:3d:23:18:f2:23:df:f2:
66:a2:8b:36:4a:42:9c:3e:08:b4:4b:07:be:de:58:
ce:17:cf:8e:17:dd:63:70:59:4b:c1:1b:43:8a:36:
0b:3f:08:8c:dc:8b:dd:2d:60:3d:74:e3:1b:5e:98:
67:81:42:9e:82:5a:91:92:e7:a2:3b:e7:4a:6f:e4:
13:dd:02:cd:1c:52:32:de:52:ad:b3:50:20:e5:4b:
39:79:db:c2:3f:90:cd:26:68:aa:d9:d4:a5:3c:2c:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:21:5C:7A:D6:AB:88:41:1D:25:48:F5:2C:55:C0:DD:2B:71:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bf97729a-6d0f-3fd4-81c4-8abdd64ac880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:8bbb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:0c:48:f1:09:7c:64:88:dc:f5:46:38:34:59:56:ef:78:e5:
a4:1b:07:c0:82:39:0d:e3:6a:f9:1c:82:4f:f5:2a:c4:b1:1a:
4a:df:8b:52:df:ee:5e:a1:07:51:2c:ba:50:21:31:13:b7:dd:
0a:89:55:0d:4a:85:89:91:94:3f:88:fc:43:51:be:4c:04:f8:
29:4f:59:74:9a:fb:ee:d4:fb:65:e6:25:69:86:6b:8a:4c:5e:
7e:ba:14:8d:f1:2b:9e:ed:1b:c2:c6:01:73:eb:9c:9c:1c:58:
03:1b:d9:0f:f2:1a:81:b9:3a:fe:0d:b3:44:3a:03:5c:c0:11:
e0:ac:c2:cf:a9:8e:81:15:be:81:78:b3:ad:ff:83:da:34:9d:
10:16:f8:63:de:ce:2d:f9:58:1c:a7:f4:92:94:be:c6:d7:9f:
29:7e:e3:cc:5f:0a:aa:34:7f:94:c4:20:7b:ca:7d:01:0f:fa:
c7:0d:8e:16:75:ef:b0:b5:03:c0:71:47:a0:8f:a7:74:45:1d:
7a:5d:2f:c2:1c:7b:bf:ad:60:21:24:29:ce:19:93:44:df:05:
76:8b:ef:a7:bd:c4:35:aa:69:a4:64:01:91:7b:b2:e0:df:39:
01:39:10:87:3a:92:c9:81:9d:bd:7e:58:2e:ac:eb:7b:05:ee:
12:51:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:13 2025 by rpki-client