Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa
File: 449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa (raw, json)
Hash identifier: 1HNpis/zUVeABvf0sUxISZ7KmCFLW+OftvVlr4ps5Xo=
Subject key identifier: 64:BA:83:71:6E:06:69:A4:3A:AE:5D:12:7B:02:AC:4A:C8:A0:20:F4
Certificate issuer: /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
Certificate serial: 010D0C9F432858496FAF0610DE102EE416F4C780
Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 14041
IP address blocks: 2620:11f:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:06:10:de:10:2e:e4:16:f4:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=f88c0df2-cb2f-48bb-b678-3de6d2848fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:5a:e4:60:15:6b:ac:ca:4f:f9:c4:34:49:
90:e3:86:6a:35:c8:4b:b8:f5:d9:ef:30:55:dd:81:
86:59:13:f9:f7:f3:d6:f8:61:53:90:a3:21:f7:2e:
79:9b:d8:c1:ed:fe:1c:0f:1b:d4:3e:a3:9e:17:2b:
21:52:de:d2:b1:bd:eb:40:f0:42:4e:a6:91:31:73:
ad:34:b4:28:6a:07:a0:83:01:dd:38:58:88:89:71:
35:f2:43:e0:62:61:2a:83:f1:83:23:8a:28:42:75:
06:08:e9:0f:58:ef:f6:8b:88:6b:48:e4:b3:89:7b:
f2:ab:5f:a9:c2:73:b9:94:41:81:89:13:df:f6:88:
8b:bf:d1:70:8d:34:21:98:e7:40:c5:7d:df:b6:05:
de:ca:c8:f5:f3:b5:c2:fb:f9:54:fb:53:84:43:c0:
40:eb:e8:c0:5a:59:2a:a9:ac:96:0e:b2:1e:1a:bf:
a6:22:7b:7c:77:6c:4a:e6:7a:69:ea:34:c4:79:84:
67:49:a1:99:65:bf:e8:84:94:9a:ff:ea:64:6f:d6:
af:16:ba:11:e1:48:50:d6:a2:d1:93:3d:23:75:64:
90:64:bb:73:1c:75:81:4b:a3:60:1d:a6:93:27:fe:
6f:cb:b3:cb:54:01:fb:12:39:fe:57:d5:76:94:ab:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:83:71:6E:06:69:A4:3A:AE:5D:12:7B:02:AC:4A:C8:A0:20:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl
X509v3 Authority Key Identifier:
keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11f:5000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c1:25:f3:f9:22:71:d6:18:d2:72:52:8f:30:10:8e:85:40:
9c:01:4f:07:a1:87:fc:b1:22:be:40:5c:f8:33:cc:d8:99:bc:
5c:6b:df:b8:e8:9a:cf:02:e6:b9:a6:44:17:8b:08:1f:0d:f6:
1f:bb:37:af:52:22:24:2f:af:a2:90:72:a8:20:17:ab:5c:18:
d5:6f:52:f3:36:37:56:c2:7a:68:b4:f6:5a:6d:39:c1:93:34:
dc:51:fc:02:8f:b2:35:71:02:fd:60:5b:de:3e:76:ff:e2:ca:
4a:32:6f:17:a6:0f:8b:02:9c:ef:23:e9:a5:cf:ec:1e:1e:50:
76:1c:22:d1:58:fd:49:75:31:3b:cc:d8:67:7a:d3:8a:34:c1:
13:1b:58:ea:1c:5b:50:cf:47:ca:98:3c:4e:67:74:20:e7:ab:
9f:5a:42:b1:da:d5:64:cd:19:59:d1:5b:f1:67:d4:a9:93:5e:
3f:72:f3:7b:bd:02:42:03:59:f3:a2:67:8c:71:88:4d:46:2d:
a8:ae:e2:54:d3:25:cd:1b:40:6b:aa:ba:8d:53:05:b3:6e:c1:
2f:03:b4:5a:e3:56:7e:e0:4a:b6:cf:b4:46:dc:66:10:3b:b9:
60:1a:1b:38:99:47:22:fd:5d:c7:11:84:ca:a7:c5:95:30:6d:
e8:83:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:39 2025 by rpki-client on console.sobornost.net