Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4c53b5-e12a-33bd-9a5a-f03889299668.roa
File: cf4c53b5-e12a-33bd-9a5a-f03889299668.roa (raw, json)
Hash identifier: bmvT1IqmVKWhin7q2WCu8S2QvMiLKUPBwB0tPQ861e0=
Subject key identifier: A2:7A:7F:B7:5E:0B:E5:3F:39:B8:C5:29:0D:F4:7A:C9:26:8C:95:55
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848ADC62699366F95B52D58092B
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4c53b5-e12a-33bd-9a5a-f03889299668.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 9498
IP address blocks: 2600:140f:d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:26:99:36:6f:95:b5:2d:58:09:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=2cf97103-b474-42bd-993f-61830e9e746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:29:6f:17:58:00:80:c5:17:41:7d:e6:10:
6a:5d:74:77:fc:d2:c7:1e:6f:9f:5e:a5:5b:fa:f6:
42:70:b8:11:fd:cc:9b:4a:d7:a0:42:89:ce:4d:0b:
41:93:dc:07:be:b8:0d:0c:ed:ff:fa:ef:a4:9f:f6:
86:a8:48:bc:54:20:13:74:7a:2d:eb:c0:4e:1a:91:
48:ce:30:2f:f2:44:be:44:a6:ac:29:c8:4f:dc:e6:
9d:d1:a5:13:fb:4a:47:2d:70:77:71:be:57:62:e8:
63:a3:f1:a3:52:75:9a:6d:2c:e2:fd:13:33:6f:f3:
d1:bb:7a:90:94:be:41:94:9f:b8:0a:85:f1:b3:86:
43:9e:1d:89:18:f9:fb:d9:f1:22:59:d0:2d:60:12:
c9:e7:f2:ef:83:a8:77:3d:06:5a:4f:64:b9:70:d7:
19:0e:be:07:43:2f:1f:51:75:6a:1e:22:e9:8f:f3:
20:28:69:5d:3c:f3:50:a8:e2:87:93:d9:25:6c:cc:
da:63:e7:08:3b:ca:92:a1:e4:ca:90:fd:96:88:48:
86:db:94:ff:23:72:db:b4:f4:9a:2e:83:fb:76:ca:
4c:6c:99:77:b1:ec:55:f0:d8:c3:ca:15:dc:d5:13:
9d:7b:ee:44:68:b3:ad:7f:4b:b0:0a:48:1f:e4:2e:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7A:7F:B7:5E:0B:E5:3F:39:B8:C5:29:0D:F4:7A:C9:26:8C:95:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4c53b5-e12a-33bd-9a5a-f03889299668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:140f:d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:a8:3b:4b:33:6f:3f:83:4b:17:60:ad:fd:e5:5d:31:75:08:
49:2e:e5:fb:b4:81:fe:b4:88:e3:36:fb:55:a5:f7:b8:9d:d2:
5e:5d:27:f7:95:57:ce:ec:9d:eb:69:12:62:68:32:6b:c8:6e:
47:b8:ee:14:39:0f:72:ff:5c:55:25:f3:1e:6a:a4:56:05:8f:
26:24:ba:2c:11:61:9f:c5:00:76:bf:0d:5a:1f:9d:27:ce:53:
cd:80:e5:38:3a:d1:04:05:6f:20:61:e1:8b:bb:93:13:8f:44:
3b:7d:05:37:ac:8b:b4:58:30:c4:42:ec:05:09:35:61:45:d9:
2f:fc:f8:4c:97:e4:92:e0:63:52:e7:d5:5c:ed:7f:8b:8c:bd:
cd:3b:85:72:c8:7c:78:37:c7:dc:0c:c0:f7:35:54:ac:36:c6:
51:3e:f0:f4:72:c3:42:eb:22:92:aa:07:a0:be:31:6b:a3:07:
ee:1a:a3:14:31:e6:c3:9b:2e:22:fd:b7:1e:87:38:7b:ac:c6:
1b:89:4d:3b:bc:4f:3b:4c:13:bf:0f:c8:21:6d:ae:d6:e2:5d:
19:3c:f7:44:2d:28:a9:c6:c1:ed:ca:9f:d0:59:f0:48:25:c8:
65:11:78:61:3b:7f:95:03:49:97:c4:94:8b:7c:fd:94:17:8c:
aa:3f:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:39 2025 by rpki-client