Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8870d5f-2138-3fea-8b09-7bf4a287cdc4.roa
File: f8870d5f-2138-3fea-8b09-7bf4a287cdc4.roa (raw, json)
Hash identifier: OT/w2s9GQ3BrCg+exfLKSfGOQcHtc5OyFkLcVsCsChI=
Subject key identifier: 6E:FE:E8:51:85:93:0C:15:FD:A6:D2:C0:1E:8F:29:A7:D4:90:FD:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B03EC65D7F99BA4D2302D200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8870d5f-2138-3fea-8b09-7bf4a287cdc4.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 2600:1f01:4800::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:3e:c6:5d:7f:99:ba:4d:23:02:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=b1191dd8-1815-45d8-a8ae-b2b78aa06d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:fc:e3:c8:bc:de:f8:90:28:f3:5c:f9:13:
f9:5e:2b:26:60:f6:c2:de:5e:76:3b:51:9e:68:06:
7f:f7:49:63:55:6b:1c:49:93:bd:23:96:2d:f9:88:
e6:f2:fc:be:a9:9b:85:c8:c0:74:b5:8f:9f:7c:86:
77:22:04:d4:0a:65:44:56:da:f0:8e:32:40:69:42:
17:14:fd:dd:c5:65:11:1c:18:83:93:73:9b:39:b5:
73:35:0a:c2:c9:86:36:97:99:5c:17:2d:4c:21:a3:
de:bb:ff:93:be:a1:70:e8:52:3b:fe:64:d3:d7:3f:
52:c9:bf:63:43:1b:08:e4:27:01:79:92:b2:06:45:
58:b7:1a:ca:96:f3:6f:31:e2:92:79:ac:cd:97:1f:
b8:c0:cc:23:36:0f:e9:14:ba:c5:2d:5e:f2:0c:6b:
41:94:e2:46:90:d8:5c:e9:fc:09:43:82:89:66:d6:
34:b7:5d:df:ba:e9:d5:bc:b5:11:92:b0:09:8f:c1:
d4:8b:3a:c2:71:87:cd:4f:df:bc:08:e2:db:ea:62:
72:c2:63:ea:b7:df:33:49:2d:92:5f:3f:8a:46:e1:
bc:fc:03:1a:cf:d8:36:bc:38:1a:d2:d1:6d:b0:81:
13:08:87:c8:7d:63:1e:55:87:e5:1a:4f:5c:ff:7e:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:E8:51:85:93:0C:15:FD:A6:D2:C0:1E:8F:29:A7:D4:90:FD:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8870d5f-2138-3fea-8b09-7bf4a287cdc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1f01:4800::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:2e:1c:a8:a4:63:60:ad:91:13:95:8a:a5:8b:0d:cc:91:c7:
42:54:25:d1:71:eb:eb:1c:33:e0:cc:da:87:80:1d:62:89:6e:
0c:da:da:77:dd:83:a1:ab:11:ab:f6:cf:9b:ab:ba:fa:13:87:
78:00:4b:1a:4d:26:bc:91:58:be:ae:c8:45:c3:bf:ba:a2:01:
e9:4b:f3:13:38:d8:22:02:fc:d7:b6:21:7a:4c:5d:44:78:34:
27:4a:ec:29:7a:28:af:50:0d:db:90:5d:ae:14:6c:f6:4d:45:
f6:bc:8c:58:19:02:9a:6c:5f:0a:25:e9:2d:00:77:ad:57:33:
4d:fd:83:e6:42:b8:7d:9b:ee:c2:57:33:c2:9d:97:d5:f5:bd:
64:94:b0:3b:c2:1d:21:03:57:fd:55:3e:ef:bb:2f:89:98:96:
c0:bb:40:e3:a8:b2:18:58:e0:3b:93:1e:91:10:8c:69:3e:c2:
6d:69:eb:1b:ec:23:8d:67:95:62:5d:51:fc:96:85:9c:7c:9c:
66:70:69:90:54:a7:80:e2:5f:49:81:0b:04:72:59:14:35:f1:
1a:8e:5f:ae:a6:cf:aa:2f:b7:02:db:c5:49:ad:66:12:26:cf:
24:fa:05:1f:6a:b5:a1:34:fb:1c:ea:db:60:a0:31:6b:0a:0c:
32:ee:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:51 2025 by rpki-client