Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa
File: 4366a209-e4e8-3e21-8800-8ffe47ac5628.roa (raw, json)
Hash identifier: QCO9omM2hHKPTy0Rh0VdDsioOgJJXELDuab2YWe2C9k=
Subject key identifier: 15:99:D4:44:29:22:CE:90:A0:83:88:81:5A:E0:F8:75:4C:C6:CC:88
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584917DC20F6BD5C73DD59A120E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 2606:4700:42c8::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:20:f6:bd:5c:73:dd:59:a1:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=0170bb02-dc4f-4671-92ff-1ca83080ae85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:b4:2c:0f:b6:e0:32:b3:75:30:36:0b:6b:
ec:f8:0f:76:60:f6:01:70:7a:b1:bd:a4:14:bd:32:
64:ed:57:45:4b:a0:8d:53:d1:0b:b1:dd:1d:39:c6:
f1:7d:75:a7:72:02:a5:e2:ac:f7:a7:98:4f:57:af:
82:6e:af:86:ed:2c:29:4c:47:2e:af:b8:6e:46:d8:
73:b4:a2:61:68:ca:3f:10:7f:84:d4:80:7b:75:3f:
eb:81:fc:c3:9c:b9:f6:bf:8c:a1:67:15:e0:b7:fb:
da:38:3e:9b:92:11:2b:3b:06:eb:c3:8e:a5:3f:3c:
f1:c0:a0:02:6f:5b:f2:6e:1c:f7:84:91:7a:f8:af:
91:d7:08:1d:fe:2d:e1:00:0e:b6:b9:ec:f1:d2:ac:
82:07:30:7b:0a:0c:87:d0:40:cb:46:59:00:64:a4:
f5:25:3a:51:2b:3e:5d:52:a8:d7:24:0c:01:73:c3:
37:a2:16:23:7b:d3:a8:0b:17:9c:b2:5c:d6:be:2b:
23:9d:97:d2:21:85:74:19:56:ce:44:df:67:37:ff:
33:ac:c8:05:66:d6:9d:19:4b:7d:39:47:29:00:4e:
50:dd:e1:05:4f:00:c7:f5:14:78:22:7b:db:c3:0a:
30:23:b0:e8:8b:99:09:84:db:f7:1c:8f:06:07:35:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:99:D4:44:29:22:CE:90:A0:83:88:81:5A:E0:F8:75:4C:C6:CC:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:42c8::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:f4:af:69:6e:a2:01:a5:54:64:c6:53:4b:5b:25:4b:77:bd:
e8:3a:d9:ec:1e:a4:a5:24:d4:ce:a6:73:76:44:ff:56:a9:55:
f4:98:85:d4:b8:dd:d1:da:55:ae:d5:14:32:1b:7a:d0:72:21:
3e:3f:e6:84:05:9d:9a:85:40:7c:19:0a:56:bd:3c:33:8f:aa:
54:d3:c6:8f:7c:c3:57:79:d4:84:4b:ec:f0:6e:8f:ac:eb:80:
23:7a:50:bc:d4:c5:f9:3e:73:8b:38:5c:92:57:70:15:6e:d0:
d7:7d:95:6c:d7:ea:e9:87:a6:a4:73:b2:20:b8:42:11:36:a2:
41:63:ce:75:0b:8d:65:fa:c2:79:f1:29:cf:e1:a7:a2:ea:76:
56:7f:5e:87:31:9d:05:d1:78:2d:1f:12:67:e9:ed:83:5a:42:
b3:d3:80:44:ec:09:3b:90:72:fb:84:7d:8c:b4:d8:0a:ac:23:
b2:e0:42:82:06:ac:de:08:9c:9c:24:02:e3:dd:0b:bc:77:8c:
12:27:d7:02:85:82:54:72:7f:af:1c:e7:94:ac:56:f7:d3:01:
aa:2f:77:64:f2:6d:2d:0c:86:b2:11:6c:36:69:36:9f:07:2c:
83:86:5a:34:8f:7d:74:6d:79:35:ae:dd:77:b7:e9:e8:94:0c:
93:e5:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:22 2025 by rpki-client