Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
File: 9e32cafe-3964-3828-b17c-06b289cf828e.roa (raw, json)
Hash identifier: cMCSlxpqtcciv0fpbcgn5dXhI+lwBrJsfJzFR3XRmCU=
Subject key identifier: 06:D3:48:B1:2F:12:99:31:2F:76:3C:BF:74:59:96:A1:60:FC:76:F7
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848C41B809CD168B8E49AA163C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 2734
IP address blocks: 2605:6c00:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:80:9c:d1:68:b8:e4:9a:a1:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=fe4579ee-8f85-4b69-bba3-1379c96b73ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:5f:dc:17:e0:a9:ba:04:23:ec:73:76:6c:
fe:c5:46:34:97:04:da:53:e2:02:e1:32:5c:6e:bb:
a1:49:d4:a9:a1:34:37:80:28:4f:32:ea:04:92:89:
a8:98:69:6f:9b:cd:0c:f3:0d:f1:dd:ed:ea:1b:b0:
c8:69:96:48:a9:35:c0:b8:0d:c9:1a:83:c2:67:7a:
6e:cf:4b:ce:c7:47:d2:c6:64:2a:e4:01:41:0a:08:
1e:14:b1:60:71:56:af:6a:bf:e8:81:b8:05:e1:0d:
8b:e4:2c:eb:c8:9b:2c:fe:49:97:49:13:46:82:b6:
23:3a:ed:03:e5:30:d0:ca:36:86:b0:d3:a2:e1:03:
ac:69:de:8a:64:a5:6b:01:52:88:f2:4c:e2:35:65:
0a:63:f2:d0:6d:fb:ae:21:b8:9f:7a:29:48:25:12:
ba:41:a9:93:7f:4f:12:d3:65:6c:e4:c2:2b:1f:56:
6b:ed:bc:3b:bf:fb:7d:9d:02:b9:32:0c:bc:8d:b1:
27:09:fd:3b:e7:f5:9b:e0:3e:f7:3d:7a:97:38:68:
15:10:13:72:0c:36:c2:70:c0:13:2d:4d:8d:20:be:
d0:80:dd:18:bd:03:a7:8c:e6:13:7f:55:e0:46:58:
6b:98:36:4b:77:fa:ed:04:60:cd:79:32:ce:d2:9a:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:48:B1:2F:12:99:31:2F:76:3C:BF:74:59:96:A1:60:FC:76:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:6c00:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:04:9e:d1:28:a1:59:d9:b0:c7:21:46:6f:1a:d6:2f:da:d1:
70:ad:99:34:d7:5b:65:0f:3a:b2:86:36:8c:d4:e6:02:d4:33:
5c:9d:03:4a:7b:a5:93:d1:7b:38:02:13:2a:94:89:75:b4:18:
82:7f:3d:90:ce:ba:ad:a1:11:04:97:18:1d:af:00:2d:80:cb:
a4:ab:77:78:2a:92:6e:be:ad:2a:8b:6e:92:70:d9:04:cf:f7:
14:9c:b1:93:c4:02:a4:e3:c6:37:51:4d:7c:97:1a:f7:2e:d5:
d7:f3:1b:ec:6d:b4:a5:e7:0e:21:cb:b8:ab:51:d0:5c:30:48:
43:8c:66:bc:38:be:75:de:8c:29:d8:27:e3:3e:f0:9a:fb:12:
5d:fb:b2:e7:02:28:c4:f1:ab:c6:d0:ab:a2:32:8f:d0:13:e3:
98:39:32:75:8d:28:6b:3b:32:76:21:eb:1c:88:75:bc:3d:53:
37:10:3e:57:d2:8e:ba:7f:a5:24:de:f3:c2:45:60:e5:1f:76:
b1:be:94:ea:60:92:1a:61:e7:4d:15:55:68:5b:54:e5:a7:22:
13:81:21:c1:87:24:49:f2:4e:07:38:19:f9:20:83:d0:c3:32:
de:9d:19:dd:c5:8f:02:a6:63:c7:40:21:f0:03:b4:1b:cb:67:
a3:14:63:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:30 2025 by rpki-client