Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa
File: 8fb3012a-d947-3398-947d-9744cdd32093.roa (raw, json)
Hash identifier: jKfgSxcWLt8Allsvu/sh0ZsRMHgk/5zkKwV2Jbdw/yI=
Subject key identifier: 3E:FA:EE:DF:91:89:8B:DC:6E:5E:76:85:C8:52:FE:5A:A1:98:76:6A
Certificate issuer: /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
Certificate serial: 010D0C9F43285848BE862A63547BBB4D6F5D2BB0
Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 2605:2c40:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2a:63:54:7b:bb:4d:6f:5d:2b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=5fe6a021-36eb-4804-ad3c-28d7eed71cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:5b:ca:92:46:34:13:f2:42:87:79:02:62:
14:ad:c7:da:2b:4a:f0:41:fd:e1:3a:3b:ea:8e:a2:
4a:a1:64:8a:b5:cf:f4:6f:f5:64:d6:dd:14:40:1d:
59:3f:51:72:06:76:c0:60:e4:fb:11:b9:fb:e6:7e:
a5:0b:18:bc:98:2a:4e:db:20:ef:be:52:05:6a:3f:
dc:a9:36:6f:34:da:7a:a4:8a:ce:45:37:8a:74:1d:
2b:d2:db:e7:22:33:9a:d1:94:a5:55:27:a4:77:21:
19:de:8b:0d:5a:a4:10:e1:33:18:42:18:cf:ed:48:
8d:a7:02:63:9d:9f:39:33:e5:2b:72:f6:46:e4:48:
57:7d:4e:75:98:6c:92:db:f7:80:ca:e6:52:39:e8:
f2:72:2c:0c:e0:83:6a:ec:b1:12:ad:ad:92:b1:a9:
28:43:77:13:17:b7:8d:72:0e:b5:dd:34:78:9e:b1:
3a:3b:98:67:9b:48:7e:21:55:cc:2e:e5:40:f4:85:
58:fa:17:69:9f:85:9f:38:84:23:ea:c4:65:e6:8f:
d4:9c:53:52:fc:fd:ef:8f:3e:13:bc:fa:2b:0d:55:
e8:ff:aa:76:c8:1d:dd:da:dc:cf:ef:2b:04:2c:ba:
11:7a:ee:63:9e:48:23:4e:c1:ef:4c:b9:92:24:d5:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FA:EE:DF:91:89:8B:DC:6E:5E:76:85:C8:52:FE:5A:A1:98:76:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl
X509v3 Authority Key Identifier:
keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:2c40:400::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:77:5a:d3:9a:82:cd:46:9f:15:54:09:01:17:18:38:1f:a6:
dc:ab:2b:2e:78:20:43:ff:3a:d4:7e:3a:52:01:97:5f:14:00:
41:9a:75:92:76:1c:60:a3:48:70:a8:61:c5:5f:a4:13:1c:5c:
3c:69:13:58:1e:5e:f9:8e:1a:c8:ba:a8:3c:9b:83:d8:f9:89:
9d:7d:2c:13:11:c0:c6:c9:e2:6f:4d:a0:d1:98:e5:94:0e:23:
ef:97:72:5a:70:27:51:80:68:e6:69:eb:0f:3b:8f:04:96:4b:
47:ad:26:2a:4c:d0:15:e6:83:8d:ba:27:93:fd:00:6b:c2:c7:
02:eb:01:ee:07:6a:76:a1:52:3c:a2:77:78:f4:8f:ac:df:39:
ae:53:02:aa:64:7d:cc:3b:ec:ab:e8:44:08:39:ab:27:ea:25:
c0:ea:0f:93:79:32:08:4a:66:b2:66:cf:27:40:e8:01:d0:08:
e7:0f:97:f0:9c:37:ed:ac:57:f4:09:72:7d:1f:17:ba:46:ce:
d4:b3:9f:77:ac:a3:a5:58:37:c1:c6:94:2d:70:30:f5:e6:59:
a1:b4:de:38:f1:cc:ea:ea:72:d0:7f:dd:f6:2a:f5:ed:70:bf:
95:7e:ba:f3:22:34:53:9a:09:0f:5d:fb:b9:27:0b:6f:ee:0f:
a8:06:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:08 2025 by rpki-client