Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
File: ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa (raw, json)
Hash identifier: pDIHFKcVvfRcIOZc78Yo5dg1DJWK4TQvyU/gLl7V+Bc=
Subject key identifier: CB:68:35:88:FC:12:2C:B2:50:FD:30:E7:53:37:5D:47:8E:0D:05:E6
Certificate issuer: /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial: 010D0C9F43285848159FF2591C5421F537836E00
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 0
IP address blocks: 2001:504:90::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f2:59:1c:54:21:f5:37:83:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=62b154c8-671e-4d5a-994d-62560294c8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:87:89:35:5f:b6:f3:46:9c:b3:59:20:49:
bb:17:7e:3c:a2:e8:08:1d:ab:42:8c:84:dc:16:9f:
f9:4a:81:cb:60:47:b8:bc:05:24:63:04:5f:ad:c6:
82:69:fe:74:55:b6:5a:70:ad:8b:b1:ff:f5:df:a5:
17:0c:40:8b:52:ee:80:c3:52:b7:eb:f2:58:55:4c:
42:1b:54:6f:9b:15:3c:4e:a2:40:83:33:47:16:97:
d3:cf:7e:89:ba:7b:2f:5b:89:96:0d:16:75:21:62:
9b:3f:19:42:d7:78:08:0e:9b:4a:9d:bf:78:bf:29:
48:44:6e:54:3e:c8:2d:1e:f2:f4:0e:2d:b8:75:ae:
41:f3:b4:7e:69:9c:25:5e:9a:74:e3:f9:c4:d1:38:
7e:a7:31:d4:4d:df:d7:00:b5:3f:73:47:74:80:17:
b8:50:ce:69:96:16:00:70:d6:88:ea:43:e5:cf:67:
9d:e1:aa:45:27:7a:45:c0:5e:46:15:5b:69:e1:69:
0a:f4:ea:73:e7:8d:b9:88:5f:8c:11:51:d4:ee:70:
bd:03:c2:5c:ed:5a:83:dc:a2:9a:d8:15:92:d7:b2:
0e:77:90:f4:81:e1:89:ce:07:70:c5:e8:3a:1d:fc:
ba:bc:8f:78:e0:ed:21:b4:ce:fa:54:d2:bb:f3:69:
0e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:68:35:88:FC:12:2C:B2:50:FD:30:E7:53:37:5D:47:8E:0D:05:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
X509v3 Authority Key Identifier:
keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:90::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:83:fd:16:30:7e:63:f7:b6:1f:8b:56:cc:3b:4e:d7:29:1f:
b5:54:54:df:55:9a:a8:d3:b8:fc:3b:c1:e3:eb:fe:c4:90:6d:
10:4d:d0:95:98:03:ae:15:2a:bb:f9:b2:54:a3:1d:e6:50:1a:
6f:58:67:83:17:4d:70:8c:be:9c:51:69:f7:11:ce:81:3f:75:
01:f9:c1:2d:26:22:c9:a0:a1:d0:ee:b2:c2:35:27:86:7d:a3:
5b:23:7d:5f:f2:77:5c:75:5f:17:64:66:ac:16:90:4c:84:fd:
60:df:8b:2e:31:b8:01:2c:04:28:18:b1:a5:fc:2f:fe:68:e9:
d7:90:58:03:d2:79:12:a9:71:38:f6:71:7f:d7:23:40:5b:6b:
ba:9f:50:26:f3:32:ad:9f:e7:82:bf:b7:72:a5:0e:07:04:e3:
0f:b5:64:69:e3:7e:8b:6c:94:bd:fb:7c:d0:cb:f6:c4:0d:35:
f2:d9:84:cb:1c:0a:69:df:e8:43:e2:08:ab:0c:e6:55:0c:74:
a7:44:98:12:0d:a5:0f:c7:1c:a7:1c:ed:f8:38:68:e1:77:92:
ca:08:22:df:34:c4:a3:81:21:2e:97:3c:ff:3c:ea:bc:da:1b:
49:48:ec:40:9e:8d:2d:1a:51:64:dc:fe:86:ae:22:f3:8e:be:
86:7b:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:07 2025 by rpki-client