Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
File: 28d9a954-6de6-3037-9560-f9bac3e99c3d.roa (raw, json)
Hash identifier: OhnJ60NAW6ZnOVo0KvWOJOmtyoEN1GScb3fp2z6dJQA=
Subject key identifier: 6A:F6:0C:BB:87:E8:DB:02:8F:ED:90:50:81:1E:1D:0A:0F:03:AC:B1
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848159FDC7932906475A2F2B400
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 30133
IP address blocks: 2001:500:65::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:dc:79:32:90:64:75:a2:f2:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=69d99666-e47f-4bc5-8b5e-383b36085edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:30:49:4c:13:e0:e6:e8:e2:78:7b:24:0c:
75:91:92:18:af:39:ab:35:0f:3c:de:67:df:1d:13:
e9:e9:cb:51:69:66:f1:aa:f7:04:fb:78:66:ab:de:
5d:73:f7:cf:29:32:15:98:7f:ee:4f:c5:ca:36:0a:
17:e0:63:84:36:3e:ff:d0:a2:45:ba:12:58:00:81:
fa:86:65:30:bf:f2:c9:4e:ea:2a:35:9b:ac:10:c2:
23:1c:ee:75:a4:8f:f0:a2:32:73:72:0f:b7:86:d0:
77:47:6b:42:77:7f:fb:64:f2:eb:59:e5:36:9c:a2:
07:c6:e6:02:e8:37:c7:a9:95:85:13:d4:93:e0:12:
c2:ed:a9:f3:47:3d:dc:4f:47:3d:64:57:6b:62:1c:
21:fc:a1:ad:bf:d1:d2:b8:71:80:a1:b9:fc:f7:40:
d7:a2:70:1f:62:24:64:9e:75:96:82:3c:20:d2:9b:
04:a8:79:1f:34:94:b1:3d:45:7f:1b:65:6f:94:60:
86:7a:6f:a9:55:5d:6c:b5:a1:15:ae:db:45:82:7f:
f7:47:cf:06:bb:51:42:b3:2f:cf:b6:d1:75:cc:97:
63:85:1a:dd:0d:c9:b2:ce:77:f3:16:d7:60:96:20:
45:fe:96:54:08:3d:1f:5f:77:bf:a5:3b:f0:21:b1:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:0C:BB:87:E8:DB:02:8F:ED:90:50:81:1E:1D:0A:0F:03:AC:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:65::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:97:9a:c1:0f:f5:44:79:51:56:25:21:c0:43:cb:4e:a9:38:
07:a8:3d:1f:e5:9f:de:16:cc:8c:55:54:b5:7c:b0:a3:43:b0:
50:64:da:02:e0:40:7d:29:9b:9d:5d:7a:3a:55:7c:7d:9e:10:
19:f9:6a:2a:ab:fe:63:40:3c:b0:e8:46:a8:e2:5c:96:e3:d3:
6a:12:f2:c6:67:ab:ad:3f:79:db:c4:65:d6:18:1c:a2:43:9a:
00:d1:eb:f6:65:63:8f:95:39:c9:48:eb:6c:4f:7e:c1:dd:40:
73:09:22:84:80:bd:cd:29:b9:87:cd:4e:d6:fb:50:54:d4:f8:
d9:2e:95:8a:e9:0b:5b:e8:96:49:68:a7:8e:cd:1c:ec:90:5f:
69:d7:ae:57:ed:10:00:37:54:6f:fc:dd:d5:ae:ec:30:83:81:
8e:34:7a:47:dc:b1:fa:62:af:60:5c:62:0c:c9:76:5d:a3:a2:
01:93:35:2d:17:d0:04:c6:b9:a7:e3:01:95:26:f1:ea:e5:ba:
74:13:fe:8c:75:70:9e:15:c6:3e:da:ca:bb:df:6e:d5:b9:25:
df:ed:6f:11:30:15:dc:8a:43:2f:c7:a1:aa:36:63:f2:b9:d4:
b9:14:72:cd:a2:e7:83:1f:b6:26:b6:09:6e:b5:14:93:a8:e4:
f9:8b:cc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:57 2025 by rpki-client