Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
File: f37e12b1-762c-3d49-8b93-8ba5322717de.roa (raw, json)
Hash identifier: af3atrkFI3a7WC2P5zC5dqAWQsg8F8/WjHW4cwk7iJs=
Subject key identifier: B5:D6:6F:43:DF:FE:B8:AF:01:5E:9B:9C:C7:C0:DC:3D:D2:09:E7:55
Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial: 010D0C9F432858489340A57C362AB7095D8D2040
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 395123
IP address blocks: 2606:db40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a5:7c:36:2a:b7:09:5d:8d:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=eb226dab-4227-46de-8a4f-b5c231605d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:ec:94:c7:0f:fc:25:c9:87:6c:cb:b7:0c:
4c:6f:85:07:f9:26:1c:c4:24:80:88:14:6e:d6:63:
e4:49:72:b9:34:ed:1a:0a:9f:2d:ad:22:db:22:47:
4b:59:30:68:63:d8:5e:4d:f5:fc:de:b0:df:8b:76:
9c:d5:15:91:61:f1:6b:56:4e:ad:55:55:e9:ad:34:
df:00:66:ff:76:a7:23:79:fe:b1:15:8c:9a:96:84:
53:23:d8:6b:73:04:d7:05:f4:2f:17:68:4b:31:c6:
ce:c5:42:5a:c3:2a:d3:31:1e:e3:89:20:64:a3:5e:
cd:dd:58:6e:d9:61:16:1c:cb:45:ba:1a:46:d0:75:
b3:cb:dc:18:7f:92:e9:68:c1:09:77:97:47:c2:8e:
74:2a:81:61:42:a1:fa:80:09:5b:e6:03:0a:23:6c:
a5:d3:be:a3:88:90:92:4e:e0:53:ea:66:e9:69:2f:
af:56:ed:d8:7c:6a:83:55:d1:a8:e2:a1:5f:c7:d8:
26:66:c4:ec:ae:25:63:37:50:f0:f6:13:f6:c3:f8:
3b:68:7b:7e:00:d1:20:f9:7f:6f:c3:56:45:1d:95:
ba:38:3a:b1:00:c8:b2:57:59:24:18:bb:a1:55:aa:
a8:fc:1f:a4:33:d6:6d:e3:95:41:9b:20:06:75:a6:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:6F:43:DF:FE:B8:AF:01:5E:9B:9C:C7:C0:DC:3D:D2:09:E7:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
X509v3 Authority Key Identifier:
keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:db40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ff:cd:9b:7e:46:e3:40:c7:b4:ea:39:25:f6:0d:0a:87:7a:
54:4d:5e:d7:55:35:fb:a5:4e:dd:aa:e0:fc:72:59:17:af:bc:
45:6e:65:ae:ec:c4:59:3c:e4:fa:e4:7b:36:97:c2:a0:91:11:
e3:a6:89:3d:b7:4d:83:a9:d5:d4:34:a4:0b:26:d5:3b:3e:3b:
88:5b:18:8c:dc:3f:2b:0d:70:9a:bb:a1:62:26:f5:9c:7b:76:
ea:60:c9:e9:1f:6a:f7:a8:bd:ab:fd:85:d8:66:54:45:c3:c6:
eb:12:ee:72:b2:91:cb:0c:03:0b:d2:3b:5d:b4:2a:17:91:86:
c1:71:17:70:a1:6d:79:9d:c2:5a:b4:7a:de:5c:6b:47:85:e3:
1d:42:0c:fe:67:4f:9d:9c:60:2e:9a:f8:64:07:d2:d1:85:c9:
55:7a:62:ef:20:c1:89:3f:00:ea:6a:8e:63:0a:8a:4b:32:f8:
50:dc:66:c8:f9:13:c1:42:5d:c6:4b:b3:68:47:3a:e1:40:fd:
cb:7f:ef:84:56:dd:7a:1f:73:b4:ce:ae:d8:4f:47:17:e2:03:
24:fc:d7:80:5c:21:92:3f:cb:8e:19:46:a0:67:a9:7c:6b:51:
83:f7:23:a4:da:68:4a:e1:b7:37:30:b6:fc:81:3f:ca:e0:97:
b9:bc:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:53:36 2025 by rpki-client