Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa
File: d829b003-3d7f-36c9-a287-f6e66f824c8d.roa (raw, json)
Hash identifier: YsGVipz/4lwVq/otO3+PaDg6p7Fq9V6oGxWohcRmNVs=
Subject key identifier: BB:A5:5C:05:91:95:6B:63:C0:EB:6B:0E:3A:94:B0:5F:EF:A8:7D:96
Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292
Certificate serial: 010D0C9F432858488F107F78531208BDCC2D35A0
Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 32524
IP address blocks: 2604:dc80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:7f:78:53:12:08:bd:cc:2d:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=2eb2e309-20ff-444e-932d-07ad2c5f6765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:ab:b2:40:87:37:54:81:92:04:b5:f8:8a:
e6:e1:a9:6c:00:54:f8:9f:3b:8e:1b:62:ca:89:0b:
2a:4a:ff:a0:d3:5a:e6:c0:06:0a:f5:4e:6e:f0:43:
f0:d2:6b:83:0f:35:8b:88:d9:b6:65:0b:f6:a1:b4:
35:3f:5b:19:3f:0d:08:59:f6:cc:4c:7d:55:38:8c:
1c:76:26:de:31:98:61:da:08:8c:ee:51:ab:cb:52:
70:0e:3f:90:ad:a3:b6:c5:f7:3d:ff:e2:04:58:a2:
b7:3b:d3:1d:48:50:e3:20:0a:33:55:d9:83:54:41:
bc:6b:81:38:c8:d3:4e:46:ec:dc:47:9f:ef:5e:c7:
fc:03:bd:d3:02:32:6a:cf:71:6e:16:9e:4c:41:c4:
3d:3d:39:03:94:b2:40:1d:2b:97:29:5a:f8:1b:ea:
e9:4f:52:0f:6c:00:07:4c:4d:92:17:79:ce:c7:79:
5c:43:9f:5f:d2:78:9c:d4:7b:48:e6:45:ca:24:4b:
d3:7a:1c:af:c8:e8:52:45:51:ac:58:5f:2b:5d:c4:
9c:c7:3d:76:6e:66:0d:10:38:9d:19:59:e2:58:0a:
14:6a:cb:82:c6:c8:d8:d7:29:1a:06:bb:1a:10:bc:
cd:17:8b:25:fb:98:71:ae:f3:60:a9:6d:3c:cd:ae:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A5:5C:05:91:95:6B:63:C0:EB:6B:0E:3A:94:B0:5F:EF:A8:7D:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl
X509v3 Authority Key Identifier:
keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:dc80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:51:c7:31:62:96:06:a2:00:cb:45:d6:0c:b4:2f:a4:c6:06:
34:f7:87:53:cb:2d:ad:a7:c2:cf:7d:26:45:62:4c:66:9c:1b:
5f:58:1d:93:b4:3d:6a:8d:ce:bf:cc:c7:22:11:ef:11:a8:cc:
84:c2:8b:19:c6:29:a7:39:36:b9:dd:3d:44:7e:ff:12:97:84:
a2:1f:e9:20:92:11:da:70:47:93:0a:12:a7:a4:84:6e:cf:d5:
80:b8:54:5e:dd:7f:aa:59:53:33:ae:a3:eb:46:3e:52:9c:56:
c4:52:f1:e2:82:05:6e:26:cf:fe:f9:e1:df:61:19:34:10:8f:
8c:ac:be:a5:41:77:74:06:6f:be:db:3e:9d:03:b0:c2:d6:15:
44:db:f2:d6:10:ae:08:73:4d:2a:07:aa:42:25:f5:62:24:bf:
bd:70:22:c4:09:3f:44:0f:e1:ef:03:e6:c5:4f:6e:c4:d4:ac:
44:ad:07:50:27:84:bf:88:c7:7d:4e:6f:8d:5f:d8:e9:d9:f3:
1a:9a:7e:8b:ca:36:cc:52:09:67:50:d4:1f:70:93:7d:69:f1:
60:03:3a:ce:41:28:25:09:80:ba:0d:1c:d2:c5:dc:d9:84:66:
ce:2a:37:fc:a5:51:6a:ba:7c:9b:17:0e:d2:af:97:29:e9:f5:
59:4e:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:15 2025 by rpki-client