Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa
File: 1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (raw, json)
Hash identifier: eblQEw6ohAsO6R0cBM0Tnnm2YWOMvJOXKSI5sgYlqTE=
Subject key identifier: B5:70:FA:7E:13:8A:47:40:9F:82:0D:5D:65:1C:AF:74:A5:77:B7:CD
Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71
Certificate serial: 010D0C9F4328584886B07B6B27363D0BBE67B680
Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 395388
IP address blocks: 2620:c2:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7b:6b:27:36:3d:0b:be:67:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=6fd35d57-34c9-441d-a892-5f7a4fb1a1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:5c:04:f1:26:c7:c2:ff:6f:5a:12:db:ce:
78:4a:b5:09:cf:c3:80:54:70:d7:3c:1c:80:e7:b4:
6d:dc:6d:d1:4f:1f:c6:8b:e6:ca:b0:cb:1e:4b:fc:
ba:59:a0:3b:b1:66:b4:cb:66:6b:69:d3:53:6a:fc:
95:5c:69:ad:e1:f0:31:66:30:42:54:16:a0:91:1b:
fa:56:90:c2:ca:ca:e9:c9:eb:c3:db:6f:f8:48:86:
a7:d1:fe:0a:cb:fd:ef:f5:1a:a5:3d:1c:19:b6:f0:
56:36:e0:af:e8:c1:2d:81:53:03:6b:c6:19:5e:e7:
7e:55:e3:66:c9:1c:a3:3a:7f:5f:46:42:45:b0:35:
8c:8d:04:90:74:e2:ba:09:d8:1a:1c:b1:60:57:54:
a2:c7:30:ad:23:09:a9:26:19:25:a4:3d:10:e0:2a:
8f:76:8a:a2:74:76:72:5a:19:5b:f1:c1:8d:ee:d6:
3b:88:1c:0a:0f:8c:aa:4d:05:f0:98:d8:80:0e:63:
f2:5d:ea:fa:eb:d6:06:7c:d0:b5:ec:a7:38:90:e1:
2d:38:57:32:c7:b1:98:4e:3d:30:19:fa:70:ea:09:
cb:e0:5c:db:62:3a:78:67:f3:5e:8d:fc:19:5e:9b:
ff:9d:6b:6f:a2:3c:3f:ea:32:e8:ba:4e:72:8a:ce:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:70:FA:7E:13:8A:47:40:9F:82:0D:5D:65:1C:AF:74:A5:77:B7:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl
X509v3 Authority Key Identifier:
keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:c2:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:86:e8:1b:87:e7:9a:1f:53:f9:13:b7:4e:63:55:c7:e5:80:
92:c0:01:b8:47:c1:9f:dd:bc:74:34:0c:ad:08:54:79:87:55:
f8:5a:45:37:69:d9:38:35:70:19:70:37:f6:5f:a4:03:18:5b:
22:15:21:8f:bc:41:06:7b:bd:9d:a2:f7:5f:43:05:a0:4e:3d:
c2:b9:a7:1b:45:2f:d0:bf:1a:34:c6:99:93:bb:d6:a8:45:06:
aa:18:d7:ac:7c:9e:5f:07:fc:3a:f2:7d:77:37:51:f1:c5:03:
4e:c1:20:46:93:09:5b:67:8c:9f:d1:99:79:dd:9d:b2:88:42:
63:25:d7:83:19:9f:d1:45:ed:2d:bc:bb:10:53:ec:85:da:ed:
78:b3:9d:95:59:ec:d6:d0:60:c3:7b:0f:9f:d7:d3:97:49:52:
ef:bf:44:b8:77:ba:45:64:b0:6f:aa:1c:db:8f:b4:c5:8f:04:
c5:9e:39:44:2e:d5:a1:fe:18:bd:63:96:48:a5:be:c3:bf:bc:
0f:f1:c2:66:77:d9:cd:57:ba:69:91:77:5a:fb:90:77:e1:c3:
49:d6:5f:f0:e3:44:c0:65:85:5f:c5:5f:92:4f:ed:1d:77:41:
13:a9:a3:92:22:0e:eb:cd:54:d3:c0:35:25:68:df:88:a2:f8:
8e:cb:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:35:49 2025 by rpki-client