Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa
File: 0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa (raw, json)
Hash identifier: T/zt491iPq25dohJGCgG2BNE51expvHx0bZv6oJ/Tsc=
Subject key identifier: 49:B6:2F:FC:FE:4A:66:C2:C1:8A:91:D5:E4:10:97:DB:71:63:3F:6F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088188E4605A1956F6C58780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 2606:4700:d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:88:e4:60:5a:19:56:f6:c5:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=4e9a9744-456e-4aa3-a227-ee3e7a7edab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:21:01:0d:4e:8a:9b:72:35:0b:eb:28:32:
80:b2:fc:c4:92:11:7e:6b:3c:91:42:bc:07:1b:a2:
ad:e4:55:96:93:90:d6:68:a2:f3:16:40:c4:9b:bc:
8f:60:51:95:9d:2e:0d:13:70:a1:16:dd:7d:26:75:
b6:d7:d4:8c:da:b9:a0:52:f9:4f:e7:95:83:87:e8:
31:06:9b:a3:23:fb:4a:cb:81:78:99:57:58:2d:7c:
8f:cf:79:b5:40:d1:b3:69:3f:1f:7c:8f:ec:d5:ab:
9a:ac:ea:52:21:a1:f5:bf:ad:86:dc:58:c2:d8:68:
92:1e:55:41:9c:53:4d:b5:63:75:b9:af:81:ca:f5:
dd:dd:0d:80:0f:18:02:07:d5:77:a6:4b:ae:13:a7:
34:ce:87:52:57:5d:a7:72:4f:12:a8:03:98:f5:5d:
cc:cd:f7:c5:00:fa:83:f5:46:1c:7b:b4:a2:11:a2:
50:fb:04:3d:a0:60:b7:8e:15:3d:6c:bc:15:c6:01:
d4:49:c0:03:6e:e7:56:3e:31:c0:ea:c3:1e:91:cb:
e4:44:9a:62:19:3b:e0:32:35:ef:2a:79:26:85:a7:
13:74:2a:8c:ac:a5:b3:e9:32:04:61:14:b5:05:9b:
3b:c6:e4:e2:da:54:a8:97:bd:60:ec:cc:14:80:db:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B6:2F:FC:FE:4A:66:C2:C1:8A:91:D5:E4:10:97:DB:71:63:3F:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:d1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:5f:85:e0:35:b5:ef:01:ee:48:f0:9b:b9:75:73:20:5d:27:
f5:95:66:d8:95:d0:f3:b5:f2:79:cd:d9:ae:56:52:b1:0f:7a:
56:25:5a:f3:eb:21:3c:f1:f0:49:e6:08:a8:e3:4d:68:30:8f:
ac:6b:43:63:9d:14:fc:db:59:42:31:9f:59:f3:c5:1a:04:36:
35:b9:c9:03:c4:32:90:b9:4f:ad:96:5b:5c:da:7d:86:69:b9:
ab:f7:8a:5d:0f:2b:47:f2:3d:cb:b4:bd:c8:75:43:79:34:35:
30:0f:9d:ad:4a:92:ba:91:da:4e:ba:e9:b8:06:0b:53:d2:a0:
12:f5:8d:b1:c1:24:1d:7a:a1:43:ea:51:44:4b:bd:b7:73:09:
7d:bf:1a:1c:c4:aa:21:af:f7:1e:1b:7b:2b:f2:7d:e5:8d:8a:
22:0d:ae:6f:34:02:e7:17:25:78:c3:18:26:f2:38:af:48:2a:
b9:e2:ab:6b:c9:12:26:b1:97:c6:11:23:42:f1:12:5c:f9:32:
5b:34:b2:0e:fb:e0:bf:71:6d:80:e1:d3:60:e0:1d:fb:01:81:
7c:0f:a3:39:98:35:73:9f:f5:a6:c7:26:05:ea:6e:2a:f9:1f:
fa:9a:cb:51:66:e4:19:16:0e:83:33:0e:96:8b:6a:0f:c2:c5:
f1:cc:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:05 2025 by rpki-client