Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35dfa59f-98e9-3fb6-84ed-3ce8064ffcee.roa
File: 35dfa59f-98e9-3fb6-84ed-3ce8064ffcee.roa (raw, json)
Hash identifier: iWWXQRrTZiSh6Cdxg05Ds+zZ0k9FmQBvubOlftDWc8U=
Subject key identifier: EF:E7:E9:2A:F4:01:41:D2:8A:3F:F2:A2:BE:BA:AB:8A:50:18:B9:11
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BE74DA8CC0DA896361C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35dfa59f-98e9-3fb6-84ed-3ce8064ffcee.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 2606:4700:440f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:be:74:da:8c:c0:da:89:63:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=855b2df8-2ac3-4093-b3ae-40aea51e2e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:d4:59:2e:00:73:63:45:ca:32:aa:8c:84:
ba:ae:eb:a8:f4:e9:f8:80:ec:8e:66:46:00:4d:36:
1b:6d:e2:a3:09:24:f7:10:fa:3a:db:0a:8b:bc:52:
8a:51:d7:7c:95:9e:fd:87:8a:52:c5:b3:7d:a8:52:
b1:9b:e5:34:b9:00:d1:9d:3c:60:0e:01:ca:0e:9f:
70:ea:e8:79:f9:88:26:8f:f2:6f:2b:43:78:ad:58:
02:30:6d:9c:a0:ce:6a:2e:0d:41:77:5d:28:91:de:
00:df:cc:24:97:4c:24:6a:ac:a7:ef:53:22:9c:6e:
a4:6b:cc:4a:61:21:36:e9:a2:84:95:0f:7f:cc:f5:
12:79:06:76:78:6f:97:06:bb:c2:da:42:78:0a:92:
17:5b:4f:72:a4:8b:a7:9f:70:0c:eb:5f:39:9d:9f:
26:01:b5:34:3c:2a:e1:74:d4:9d:1a:53:37:24:ba:
20:86:a1:1d:77:0f:db:9e:0f:74:77:91:44:46:b3:
6a:19:ef:72:6b:d5:91:14:d1:02:b4:3f:f8:a1:96:
9b:25:78:41:b6:2f:cf:e4:39:17:9a:ed:77:06:dd:
1d:c0:6a:a3:49:4b:d6:a9:73:13:51:d7:18:d8:25:
3a:24:f5:42:e0:7c:d3:dd:3e:bb:47:2d:a7:95:6b:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:E9:2A:F4:01:41:D2:8A:3F:F2:A2:BE:BA:AB:8A:50:18:B9:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35dfa59f-98e9-3fb6-84ed-3ce8064ffcee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:440f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:6d:cc:a9:ec:2f:23:43:ed:d9:f9:c0:3f:ec:98:20:b2:be:
83:1e:33:ce:aa:cf:7e:db:9b:95:db:3f:ba:32:79:1b:96:00:
89:c5:dd:b9:ee:1a:a3:5d:b0:06:d9:0b:d5:96:56:b4:49:f9:
15:c5:d7:d7:26:3e:fe:ff:a0:57:f9:8a:a4:b2:bd:97:3c:bc:
ca:91:00:90:a9:1d:d1:ed:1b:c1:0b:7e:67:ce:24:b5:d4:1f:
0b:f4:10:63:fd:13:e3:9f:75:91:26:63:bb:60:54:df:80:18:
f8:8e:68:75:17:d4:b7:86:ea:47:56:b6:78:58:95:6a:70:0e:
15:b3:06:33:cc:d7:fd:20:e1:5c:1b:74:b5:7d:a9:94:64:79:
f7:b7:00:b0:29:78:8c:52:ff:f4:e4:1e:fe:26:94:5e:02:2f:
aa:de:6b:53:38:99:c2:6e:8b:97:7e:18:23:9c:72:11:9c:1f:
5c:47:76:6e:5a:c0:ac:20:da:c5:ed:8b:4e:b9:44:71:52:eb:
e1:45:18:77:38:83:2a:4f:e0:92:90:fa:d4:7e:d4:95:03:fe:
14:e1:83:f9:6c:d1:13:99:88:5e:4e:6c:da:29:4f:d0:95:b8:
25:0b:34:40:30:07:9d:a1:10:3f:47:2e:60:81:72:e0:88:20:
02:3e:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:51 2025 by rpki-client