Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d88408-a513-3c6b-9fcb-b65211db2703.roa
File: 33d88408-a513-3c6b-9fcb-b65211db2703.roa (raw, json)
Hash identifier: ffGluG9KU3YcQhMJZ8zIOJ45haX/HOO6MX/qovHLgbY=
Subject key identifier: FC:59:A8:1C:B9:FB:2D:1B:D1:58:F1:AA:0A:40:55:D8:DF:BD:BD:F3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488AE0B32F7C4ADF0DD8A44600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d88408-a513-3c6b-9fcb-b65211db2703.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 2600:1404:9c00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b3:2f:7c:4a:df:0d:d8:a4:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=f7ed5333-aae3-400f-99c1-d3e6b4a1ba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:4f:c9:f9:ca:41:04:c2:98:9e:5f:58:dd:
57:bb:90:e8:a0:63:a2:a0:69:fc:db:cc:dc:bf:73:
66:c4:ca:68:f4:e5:88:93:be:86:c4:8f:b3:69:2b:
8e:f0:6d:39:bc:13:6a:89:54:1f:bd:e6:2c:89:0a:
7a:30:a0:f5:c9:db:d2:86:7c:16:bb:a1:81:f5:14:
df:a5:74:c8:f5:ae:1c:ad:df:14:70:6b:52:0a:cc:
2e:49:c1:19:a0:b4:ac:34:3a:8d:db:2a:6b:21:6d:
91:f2:1d:c1:b3:ea:cb:ca:47:43:65:25:f7:55:58:
9d:85:e3:55:d8:1b:8e:ee:c0:96:52:d4:d0:bd:15:
30:28:89:d1:e8:0f:4f:c2:5f:04:9f:6a:64:50:38:
3f:c9:84:17:2b:73:7f:ec:b4:df:80:92:02:89:23:
cb:81:ee:ed:e4:8a:c4:66:89:f1:e1:af:69:91:cb:
18:9a:94:b5:01:ab:5c:91:3e:87:24:bf:35:35:a7:
88:eb:76:fd:58:01:2e:4e:58:27:f5:43:f8:e5:c3:
f5:d0:e2:03:a3:d3:f8:e2:93:80:a9:1b:5e:91:10:
8f:ea:5d:fd:71:1d:1d:7f:4f:01:24:40:55:a5:d2:
29:03:86:90:02:e3:16:ed:48:05:99:da:26:29:f8:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:A8:1C:B9:FB:2D:1B:D1:58:F1:AA:0A:40:55:D8:DF:BD:BD:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d88408-a513-3c6b-9fcb-b65211db2703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1404:9c00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:7a:d0:4c:b6:9e:5d:08:63:3d:a3:65:ad:af:c5:0f:42:2f:
5e:8e:72:96:df:6c:d0:6b:10:e5:99:3b:da:81:42:5b:cc:b1:
50:1f:10:0b:1d:e0:f4:89:1e:ce:16:a8:f1:70:49:fb:c3:89:
01:08:fb:a9:df:05:ff:81:17:9a:dd:b9:0f:24:cb:f4:f5:04:
6d:9e:a5:ae:9b:3c:01:b1:8a:03:be:3a:b7:3a:ff:a3:0f:8e:
28:38:0e:c6:4e:e6:df:61:cc:75:1a:38:1c:e3:60:ee:c6:4c:
33:e1:e0:5f:be:34:5f:88:99:74:5d:7f:aa:eb:d2:a1:0c:a9:
1f:02:e0:d2:cb:21:af:c7:96:55:11:b8:5e:f4:a9:96:0e:94:
17:b2:56:19:40:e0:18:ce:49:fc:21:0d:5b:98:48:72:84:bf:
e5:d3:9c:ce:7a:a7:6b:fd:38:38:aa:aa:0d:b6:5b:e2:2d:3b:
81:75:54:a4:05:9f:fa:ad:05:d7:b8:9d:19:51:3b:14:a2:9c:
74:43:f2:41:83:7c:ca:54:03:6c:1c:a8:ae:bf:b1:46:24:39:
93:06:e2:de:29:2e:2d:ed:56:eb:5d:b8:24:f0:68:88:38:87:
fb:db:01:a2:15:dc:5a:dc:9d:c3:4d:24:98:2b:18:b0:d4:c3:
47:ab:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:59 2025 by rpki-client