Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
File: f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa (raw, json)
Hash identifier: HZ5aN510cLSKAvEG7ALIkm9BrF2BiRhqeXvU/KIcqIc=
Subject key identifier: 24:D3:EC:23:BD:CF:53:F4:CF:3D:C7:22:E4:CC:FB:A3:8A:8B:94:59
Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial: 010D0C9F432858482BF55AE157CE96F2A281C280
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2620:c3:e000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5a:e1:57:ce:96:f2:a2:81:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=df4fbc12-3722-4507-aa5e-c8caaf08c7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:de:32:35:ec:df:b3:36:2c:1d:a0:4b:15:
c0:59:32:8b:b1:ed:c2:b5:f7:2b:b9:88:43:29:fc:
42:af:76:04:69:0c:2f:f4:d8:28:24:16:1f:59:d8:
e3:53:28:ed:d7:fa:1e:fe:da:c7:81:79:d5:5b:81:
bc:46:95:bd:63:87:16:17:f3:ab:78:ce:ef:75:00:
b6:20:11:9f:1d:1a:b8:1e:01:d4:05:e5:b3:88:64:
3c:70:2d:ef:66:b3:7e:ca:a5:d6:7d:05:2f:fc:a5:
40:0b:d5:48:56:ee:18:c5:e3:eb:f5:9d:47:51:84:
93:51:f7:48:58:c7:b0:e2:72:52:60:7e:69:84:2a:
a6:67:98:04:08:69:86:a0:75:7e:af:2b:7e:4b:25:
52:49:10:2c:83:fd:eb:ac:27:12:c0:27:a9:21:19:
34:7b:a6:6e:57:2a:c4:f0:82:a2:1d:12:aa:6a:85:
dc:a1:49:db:4b:9d:f4:db:6f:e2:be:6c:92:9c:15:
69:0d:1b:8c:62:02:2f:f5:13:b4:43:b9:8d:4c:ad:
5b:b9:f0:6e:65:8c:42:4f:83:58:22:83:dd:df:e8:
b3:cc:38:df:b4:58:37:e1:67:13:5f:d2:0d:a7:a2:
fe:d3:a3:e3:ae:e6:71:43:f7:77:1b:18:8f:4b:fe:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:EC:23:BD:CF:53:F4:CF:3D:C7:22:E4:CC:FB:A3:8A:8B:94:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
X509v3 Authority Key Identifier:
keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:c3:e000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:26:43:d8:5d:09:56:b5:25:5c:38:c4:52:f3:25:ad:e5:ae:
e0:7b:c1:57:86:c8:f7:d6:da:11:f5:68:0f:34:dc:30:5a:57:
7b:bb:ba:27:0e:dd:36:a1:f1:d0:17:83:37:59:45:1c:a8:df:
60:9c:b2:31:43:c3:6a:43:c7:f8:4b:19:de:bc:cc:ac:d5:cb:
8a:9e:84:9e:5a:23:96:2f:5c:f0:14:a2:3e:82:7f:a6:ce:93:
63:36:d9:70:a5:8b:af:90:82:ac:2e:59:a5:ef:92:ef:7e:03:
a7:08:23:2b:55:71:cf:f2:1c:de:fd:ba:17:50:94:86:de:35:
37:dc:79:ba:53:b9:e8:10:cb:9e:6f:96:28:26:c3:7e:cb:ac:
be:c2:aa:a5:04:a8:40:c3:2a:f2:00:c6:39:01:d5:18:40:ea:
fe:ec:8d:d9:55:76:42:a7:3a:1a:ec:ab:15:9a:a9:dc:f1:75:
1d:d6:c0:09:bc:0e:2d:54:f2:4d:eb:c8:bd:52:07:be:23:7f:
3c:09:b0:6a:41:86:21:3f:d3:84:c4:d6:df:3e:f4:9d:70:f4:
fb:8f:06:fa:75:1b:fc:07:98:fc:f9:58:ca:ee:75:8f:07:7e:
a7:df:bf:29:43:f5:f2:1d:99:3f:92:75:29:74:53:27:90:f2:
34:a8:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:35 2025 by rpki-client