Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa
File: 7521a614-187c-3123-b77e-bd58d56bf8bd.roa (raw, json)
Hash identifier: JyVftPoFHaL4R8Skalvk6Sm0PWW6wOedz9ED9NwjnlI=
Subject key identifier: 46:97:5D:17:67:96:D1:D1:1F:8A:24:B6:1C:01:1B:D3:CB:8E:18:50
Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial: 010D0C9F4328584851A582FC516ECDA740A98A20
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 4226
IP address blocks: 2604:f580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:82:fc:51:6e:cd:a7:40:a9:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=574cdff2-0920-4a7d-864f-54f094497c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:5b:c7:99:67:a5:da:19:9e:a9:49:b5:5e:
0b:b0:0a:2d:31:a6:4b:40:47:b3:71:ce:65:fc:d5:
bb:93:f0:25:a6:23:f2:9c:9c:4a:d0:24:7e:e5:a3:
af:d4:1e:e0:a7:9c:f0:fb:37:e2:a8:8b:ba:c7:51:
e4:cc:36:28:43:d2:f1:37:ef:89:57:1c:88:68:2f:
a5:bf:27:fa:27:40:c8:72:c4:9a:f6:57:07:80:a2:
58:e9:d9:03:c2:a5:dd:98:f6:79:8f:9a:a2:35:5e:
a9:c4:71:96:b9:ef:fb:bd:76:d5:2f:d1:5a:fa:f3:
a2:1f:b0:34:fc:5d:b2:bf:c4:8f:8e:62:83:0d:a5:
55:64:97:5a:79:fa:90:05:50:af:7a:40:52:5f:22:
71:e8:2f:d9:92:7f:d6:28:07:77:b5:d9:f7:6d:a0:
1c:52:3f:10:ce:c1:c0:5e:ac:c1:d2:36:8e:e6:95:
cb:b1:b0:01:95:fa:e4:4d:22:b2:82:36:13:01:18:
cb:ef:7d:50:42:2e:ac:b3:a1:71:26:eb:1c:b3:71:
36:f8:ed:64:e8:04:b6:b1:35:3d:df:13:6c:3b:30:
2d:28:40:4a:7d:16:ae:1d:a5:b1:63:8b:d9:09:91:
18:ed:41:e0:a3:f9:d6:cd:ed:d0:63:38:4e:99:39:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:5D:17:67:96:D1:D1:1F:8A:24:B6:1C:01:1B:D3:CB:8E:18:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
X509v3 Authority Key Identifier:
keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:f580::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:3f:bf:2c:c3:f5:0f:e5:6b:b8:a2:78:14:58:59:45:f6:d6:
e9:1b:7d:70:7e:2c:c8:50:a0:d0:c6:a2:b8:5a:38:3a:a7:71:
26:16:c0:93:83:d3:df:10:cc:10:05:00:2b:17:87:3f:09:7e:
3c:38:5b:35:21:d7:b9:94:bf:56:73:84:95:e5:3f:19:05:8c:
cd:96:25:bc:a4:62:51:e5:c5:ed:ad:3b:9b:bd:58:da:7f:5e:
0a:1c:b6:91:aa:62:9c:c9:57:9a:ee:0d:41:94:a2:d8:24:40:
a1:7b:8d:f8:06:2e:5f:cb:96:f9:eb:71:8c:9c:1b:d1:71:d9:
ad:b2:56:86:2b:e9:62:b8:dc:c5:13:e5:41:3b:fb:61:40:44:
3c:20:5b:18:c0:0c:05:bd:71:ea:7f:79:22:f9:50:86:0a:7e:
52:4f:56:53:17:85:85:a2:cb:ef:b8:c9:91:0c:69:30:53:0d:
7e:e6:f7:e4:22:b8:45:01:cf:d1:fd:27:28:76:b2:68:3a:28:
5c:79:29:49:64:3a:dc:f3:63:40:61:68:e4:35:30:e7:86:fd:
fc:78:be:17:50:e0:24:d9:e4:3d:98:0e:43:b8:57:e0:fc:ec:
dc:31:0f:cd:de:c0:ea:32:a1:95:10:61:85:2e:bd:1a:37:ea:
88:ab:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:57:11 2025 by rpki-client