Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa
File: bc36308e-607f-36db-982f-4ca4d4f2788b.roa (raw, json)
Hash identifier: 55AS+XZ9xPUU0Ral6WXdUYI1+n1m++u45XJAnpI+apw=
Subject key identifier: EE:2A:A0:B3:8D:B4:C5:F1:EA:E1:41:0E:F1:56:31:62:DE:B9:9C:1A
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F4328584909E69EA09D9E24D13903F940
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 1403
IP address blocks: 2600:d400::/28 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:9e:a0:9d:9e:24:d1:39:03:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=bb155100-1cca-4787-b2fd-98e8b81bf07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:4a:64:3b:7a:9e:44:b0:ea:90:86:67:ff:
92:26:c5:23:02:07:fe:e7:e0:89:f4:30:eb:da:58:
cc:28:52:17:eb:40:58:b3:0e:7d:20:f2:28:ee:81:
84:fa:8d:fc:e2:11:31:14:ed:1b:66:8f:33:cb:e9:
44:06:27:fd:28:a7:24:c1:bf:0e:51:a4:bd:70:84:
6a:71:73:e0:61:1d:b5:95:cd:71:56:b6:02:1f:a3:
9c:f2:60:a5:db:0a:16:b2:20:0f:d3:8c:d1:47:ce:
b5:05:aa:bb:5c:46:24:b9:a2:5e:c1:80:67:e4:19:
59:35:f7:21:4f:6f:54:53:09:64:aa:20:61:15:77:
8b:50:c2:10:34:b8:ff:92:ce:f1:52:f6:5c:19:32:
25:4e:0f:13:64:26:34:6f:ad:d3:e8:66:67:52:dc:
96:c0:1b:3c:bc:15:99:e8:58:bc:48:63:d9:6f:e8:
af:8f:27:f5:17:62:9d:34:6b:b2:43:30:d3:45:3b:
f4:18:05:08:87:25:35:ed:44:f4:77:f0:b3:0e:fc:
bf:b2:b9:0f:0f:d0:e5:45:3d:e7:6a:cc:53:61:9c:
a3:4a:ab:a9:c0:e0:e9:e9:d4:ee:96:01:42:64:df:
34:d2:35:9a:12:90:e7:6e:8f:8a:16:44:2d:1d:64:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2A:A0:B3:8D:B4:C5:F1:EA:E1:41:0E:F1:56:31:62:DE:B9:9C:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:d400::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:0a:11:de:7d:31:4c:72:40:f0:83:9f:29:2b:96:ae:bc:bd:
16:b3:fc:16:d7:0a:25:e4:62:49:bd:43:02:31:36:19:30:b0:
64:43:fd:04:b6:0f:65:ee:21:be:be:2c:e8:73:ad:b0:1a:4b:
91:b5:d7:4d:74:cb:d8:6f:47:eb:34:90:43:da:e9:26:33:49:
0b:27:9d:1a:31:33:e5:cc:c9:0f:a8:1b:d8:9c:e4:96:02:26:
f6:73:b3:10:98:be:ff:48:eb:d3:fd:27:c4:82:6a:c5:3d:3f:
4d:79:7b:cf:5f:96:ba:ac:b6:d9:1c:10:2b:e2:8b:c7:f4:f7:
3d:90:31:4c:83:1a:6e:77:23:4f:02:f1:46:12:66:bd:12:b4:
48:82:6e:60:3d:c5:6a:29:27:00:5d:6c:d6:e5:f5:1e:c3:28:
22:aa:01:1a:ef:d2:c7:8e:bc:43:6a:be:67:66:aa:b4:3c:8a:
bd:3e:eb:bb:a8:56:d7:cb:ab:ad:06:6c:74:89:6c:80:a5:31:
70:d2:3b:58:af:ec:8b:b6:34:31:26:f6:52:99:06:2f:a1:0e:
e8:a7:6a:10:59:fd:1e:7c:ec:cb:28:6c:d2:9d:e2:97:87:87:
0e:5d:9e:b2:60:9d:ee:dd:75:dd:72:07:7e:0c:6b:b4:24:7c:
8e:df:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:19 2025 by rpki-client