Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b4df8b-298e-379f-b0d7-67bbbb2bd438.roa
File: 98b4df8b-298e-379f-b0d7-67bbbb2bd438.roa (raw, json)
Hash identifier: xdqCObSHHMoG9/n1t4ihRuVIyHAc3oAD0IhcbqPQkGQ=
Subject key identifier: F1:1E:B7:1E:0A:FE:70:EA:20:8D:1D:C9:A1:E5:37:9F:59:3C:58:DC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BE5799353B6366915BC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b4df8b-298e-379f-b0d7-67bbbb2bd438.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 2606:4700:440e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:be:57:99:35:3b:63:66:91:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=78619b5a-bcb1-4c4b-a2dc-3d0a3aa730a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:bc:91:31:03:42:10:a4:f1:52:35:b1:b9:
3e:ee:1c:be:61:b3:82:c9:15:1b:ac:16:95:80:2c:
60:cb:b8:4a:81:93:59:03:a8:f7:b5:77:c4:9b:47:
47:b2:40:7b:ec:6b:fe:53:68:a9:4f:1a:9c:aa:ed:
91:46:75:6d:79:b0:ea:f4:f3:88:85:a2:84:72:8d:
67:6e:fa:3d:72:4e:26:17:b5:c0:10:1f:86:4d:d9:
fd:8b:7a:80:a8:2e:a0:fb:bc:9a:f9:9d:b9:99:08:
17:20:05:6b:0b:dc:df:df:19:89:22:3f:4f:df:4a:
0b:6b:e8:39:d5:9b:e8:98:86:0b:ea:c4:aa:33:3f:
da:6f:84:bd:65:ee:c2:b8:a5:82:29:a7:35:ef:c6:
21:e4:89:f1:56:83:81:7f:64:c5:2c:83:eb:5e:a9:
b8:dd:14:ac:47:61:32:d0:cd:85:62:97:fa:1e:6e:
42:58:6e:cd:1c:1a:03:45:6a:33:0a:a7:89:99:fd:
e1:06:14:cd:39:24:33:2f:a7:b1:ec:1c:fc:5d:3d:
a8:f8:d8:c1:3f:95:09:9e:bb:3e:48:40:db:30:52:
79:89:65:fb:09:09:2c:41:ca:80:fb:38:92:00:d3:
38:d9:d7:91:4c:a6:68:96:43:2a:43:1a:74:59:fe:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:B7:1E:0A:FE:70:EA:20:8D:1D:C9:A1:E5:37:9F:59:3C:58:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b4df8b-298e-379f-b0d7-67bbbb2bd438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:440e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:60:77:4f:e7:ef:22:48:96:ef:3a:5a:56:9d:c8:4a:df:70:
d7:64:9f:83:37:ec:2e:82:aa:f6:a3:4c:9d:9c:b8:f6:d9:ea:
62:fa:fa:a8:da:3b:75:34:a1:12:33:b9:1e:55:8b:79:5e:4d:
32:29:77:b8:18:2b:3d:2a:c7:ae:cc:8b:c0:68:26:bf:af:37:
de:61:7e:b7:08:60:ff:19:34:56:a0:66:5e:f5:fd:d3:2d:31:
e1:b9:ca:68:86:6f:18:43:d2:ff:4c:32:92:d9:94:cb:2d:6d:
e6:10:54:f9:87:4e:34:32:f2:6d:93:cc:fa:79:06:4f:42:0a:
31:69:9c:0e:51:f6:95:32:cb:f3:4d:c0:53:a8:ef:53:af:80:
d7:bf:ca:88:8f:32:d5:c0:14:07:6c:d1:2f:ec:9c:47:ff:0f:
95:4f:76:56:1a:00:06:dc:f0:7d:75:09:6a:3e:c4:4e:14:f8:
9c:44:ae:a6:bc:f7:d7:60:b7:9a:df:49:df:54:2c:1b:8e:64:
4f:65:88:8b:82:eb:14:74:a6:6a:cf:66:ea:31:d9:69:aa:16:
15:63:10:d5:1c:dd:f4:54:7a:89:06:8c:48:96:10:a1:c5:77:
c5:c7:9b:c2:14:fa:a9:0a:46:50:e1:b4:6a:66:18:24:70:17:
5b:a5:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:53:07 2025 by rpki-client