Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
File: bc90a123-68b1-322a-9457-bc94097ef1ea.roa (raw, json)
Hash identifier: 8yQcGJAzEbS4PY+gsoSZk4sp6fg76g4r/M2eYL3eDRw=
Subject key identifier: 37:60:B0:25:25:96:B6:3F:A8:B7:3B:4F:34:9F:39:62:2A:F2:D9:EC
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F43285849287E6C882F76D6652F5A6D40
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 2602:f9e7:20::/46 maxlen: 48
2602:f9e7:24::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:6c:88:2f:76:d6:65:2f:5a:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=90a34572-ce61-4ab5-b84c-7bc6eabf0167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:35:a0:ea:ad:c0:f3:fb:9d:e5:c4:fe:7e:b5:
fe:4f:f2:7d:48:e5:c8:e5:b7:9c:d2:20:a7:4f:91:
42:85:fb:ff:63:f0:57:d8:16:9f:b1:9e:64:b2:b5:
1e:9a:b5:1a:b3:71:d3:06:53:52:b7:3d:10:06:7c:
10:5d:e9:9c:9a:9d:e4:07:df:bf:7a:b0:07:b8:3a:
9f:aa:ab:d0:07:34:ce:2b:32:0e:9e:bc:f9:e8:2b:
eb:ee:49:8e:d4:45:8b:64:66:1b:9c:98:6f:be:16:
2a:db:e5:05:e0:25:01:89:74:79:37:d6:92:3e:5c:
ec:d6:95:cf:86:93:4a:64:ff:f4:72:25:ce:0f:3b:
ab:b4:19:2b:83:0f:d7:aa:d2:95:3c:7b:d9:cd:49:
6d:03:0b:44:fd:a2:fb:e5:1e:70:4c:e1:b5:30:a5:
03:54:36:07:4a:ab:85:b6:ef:97:83:b9:34:a8:65:
27:fc:e2:0a:0f:da:af:de:01:08:ba:e1:3d:5b:94:
b6:c8:9f:45:46:51:17:18:09:08:5d:9c:3a:60:d7:
cb:af:13:c7:6d:28:04:b7:01:21:a2:bb:7d:71:2c:
fb:0f:5e:38:b3:bf:16:30:1b:79:e4:ea:4e:af:d2:
3f:ec:46:f7:cb:18:bc:1c:1e:5b:90:33:ec:77:dd:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:B0:25:25:96:B6:3F:A8:B7:3B:4F:34:9F:39:62:2A:F2:D9:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9e7:20::-2602:f9e7:25:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:1b:6c:61:5d:d2:33:46:f7:7c:a3:97:1e:25:90:f6:77:56:
c3:40:64:83:f8:2a:ea:63:2b:e2:e5:ef:0d:96:af:26:4c:f7:
8d:ac:42:ca:11:40:ca:3c:28:0c:91:00:a3:44:63:37:14:6c:
52:04:db:00:2c:cb:3b:5e:ed:ab:da:4e:55:2d:33:b1:af:4a:
c6:e0:64:6c:37:58:f8:d5:a0:8d:77:c1:3b:91:d3:9d:ea:fd:
fc:b9:3a:b7:ae:62:af:b9:e6:ee:06:a5:70:fe:46:f8:20:33:
ef:84:32:e0:a3:37:3d:4e:4c:9b:97:28:51:f2:8e:c2:71:36:
52:a0:cf:20:98:1e:10:50:d4:25:5e:d5:5d:fd:9f:54:c4:5c:
a6:9e:76:14:81:43:01:78:54:ef:61:9a:d1:e7:f1:ad:27:c5:
03:aa:9f:16:02:02:3c:49:8f:19:02:82:7a:6a:84:bb:bc:c8:
fe:5f:a6:ce:41:a1:9a:1d:fa:2e:6b:e2:1c:38:53:5a:b0:56:
69:7a:8e:e7:43:3b:83:27:c5:ae:75:87:1b:71:93:5a:f3:6b:
53:d6:5a:5a:aa:c9:14:c1:2e:c6:2a:e6:9f:8a:87:ae:e3:5f:
30:96:46:78:20:2b:e3:54:f7:53:75:c0:5c:24:1e:f0:cf:d8:
21:c5:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net