Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa
File: aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa (raw, json)
Hash identifier: fYCIpqaHWQBhxl/d7TDUAmGTqCL6gvwuSFMqDjDdkd8=
Subject key identifier: 7E:7A:0C:03:15:A0:1D:4C:31:A2:68:13:2D:34:F6:A3:A2:74:69:46
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325BF16D5850BD16B52CE40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 2620:11a:c04d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:bf:16:d5:85:0b:d1:6b:52:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=7e954c11-eec3-4861-908f-3b9b125e8039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:d7:0d:64:e4:d2:76:5d:3c:a7:14:d5:a0:
c1:47:2f:4c:01:d5:6c:77:77:de:52:f1:6a:cc:77:
cf:00:25:6d:d4:9f:cd:c2:43:87:79:59:1e:fa:5b:
be:b5:15:c7:59:f7:d2:a8:54:86:7d:ca:33:af:65:
d3:c5:f6:c5:02:53:75:b9:eb:16:7c:8b:3b:a9:31:
17:19:0f:7c:c5:8e:3c:ab:72:47:41:1a:11:b0:ce:
df:f4:98:e9:3a:fe:c5:1c:f8:f9:ae:40:ba:a0:ea:
41:fc:39:bf:9b:a3:6a:97:11:c7:e5:80:58:dd:f9:
32:3b:d4:16:f3:c2:7e:e9:b4:9b:b7:92:c3:aa:69:
30:07:fc:1a:ec:f0:1e:76:1c:0d:02:db:7a:a7:40:
61:a8:ce:44:30:67:94:3c:19:fa:58:9e:0e:07:00:
75:68:25:48:24:cd:be:f9:c2:73:b9:93:9f:c2:dc:
77:ad:b1:3e:ad:e1:76:38:10:ab:bc:62:79:0d:2c:
b2:fd:c2:f2:61:fd:45:6a:88:6b:09:16:bf:9e:99:
b0:30:13:57:64:94:f6:7f:d2:74:39:a5:13:55:94:
a8:ae:f9:cc:89:7b:dc:8f:b1:cb:70:79:b5:e5:13:
b3:0e:66:c1:de:8e:5a:70:b3:5f:6c:44:d4:04:ae:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:0C:03:15:A0:1D:4C:31:A2:68:13:2D:34:F6:A3:A2:74:69:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11a:c04d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:ae:7b:77:25:93:93:d4:09:41:73:4c:87:ca:ad:5d:eb:c2:
5c:a3:98:88:72:91:7e:e9:14:2d:5b:39:f3:86:90:01:0b:31:
95:99:13:2c:d0:13:ad:62:53:fd:8b:c0:52:67:d2:3b:6d:6c:
34:9f:44:23:85:37:0b:ce:62:b3:63:21:1f:ab:32:01:48:fa:
bb:42:69:07:d1:ba:c3:ca:b1:a0:34:dd:cf:72:82:9e:b7:87:
2a:e1:3f:d0:3f:5b:72:26:a0:31:2b:4d:f3:02:0b:9b:8d:6f:
53:5b:89:43:5c:05:b0:ee:68:37:be:64:d8:58:59:c6:23:fc:
3d:6b:42:bc:b5:bd:6c:14:fc:ce:0e:7b:c7:02:21:d0:3f:14:
25:14:12:a4:50:16:ff:87:5e:e6:60:96:a1:b4:26:92:a8:3b:
b6:8c:c0:11:e0:61:cd:88:28:01:0e:44:ae:c0:f9:c3:ab:7a:
36:e7:37:64:30:74:a3:fb:a3:5d:0a:2d:b1:50:25:46:52:67:
de:77:90:c0:09:01:47:40:e1:4c:47:5e:b9:fd:be:32:13:4e:
4a:95:45:87:ed:39:e0:d5:86:e4:2b:3e:58:a2:78:92:b8:c8:
e6:24:0c:01:ea:d4:6f:c7:b2:b7:c4:d1:90:d0:00:c5:57:34:
2b:e2:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:29:07 2025 by rpki-client