Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3d957a8-a439-3375-807a-999a25d7e06c.roa
File: b3d957a8-a439-3375-807a-999a25d7e06c.roa (raw, json)
Hash identifier: eG6y+EZqEPO3XAJwFdauRXkZdH7z3moroj/KdBgIICU=
Subject key identifier: A7:F0:F3:8C:3B:71:12:64:70:36:0C:22:FD:19:D1:F1:96:97:37:A6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848B811E5E781FD90F904047A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3d957a8-a439-3375-807a-999a25d7e06c.roa
Signing time: Thu 30 Jan 2025 18:31:41 +0000
ROA not before: Thu 30 Jan 2025 18:31:41 +0000
ROA not after: Wed 30 Apr 2025 17:31:41 +0000
asID: 13335
IP address blocks: 2606:4700:4028::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:11:e5:e7:81:fd:90:f9:04:04:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 30 18:31:41 2025 GMT
Not After : Apr 30 17:31:41 2025 GMT
Subject: CN=4328e8aa-992e-439b-b0ae-ae8a81e70f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:15:37:29:57:ff:a8:ee:67:26:d8:1d:0c:
c2:fa:82:34:ba:07:e6:66:9e:48:21:f2:50:20:ae:
65:8c:87:16:2b:22:20:24:08:7a:da:c5:80:97:0d:
2c:ea:5b:4a:00:92:07:c9:aa:6a:ce:33:2d:d2:f1:
bb:3f:cc:ca:ea:06:4a:b5:2d:21:d3:e8:06:44:6d:
20:90:94:08:70:5b:63:08:d3:a9:93:52:aa:ad:65:
e4:b7:a0:a9:ef:9b:b4:8e:8f:ba:a7:ac:5c:30:9b:
3a:e5:40:5d:94:14:5a:88:f1:4d:ac:b7:dc:a9:96:
5d:be:b8:ed:6c:2c:23:3f:ad:20:fe:90:22:ad:c9:
09:ed:cc:bb:b5:f7:ec:09:9d:ae:65:a2:61:46:09:
57:84:1f:e0:1c:60:e3:44:eb:5b:71:bd:81:25:05:
58:be:23:a1:45:4c:3b:d0:3a:78:2e:33:d0:43:af:
05:12:4c:0c:01:8c:3c:9a:75:3a:c1:97:01:4a:d3:
c5:b8:c6:9f:c4:b6:de:90:b1:23:c2:d5:4e:a1:a7:
24:be:2c:7d:d0:96:a6:c3:12:46:b7:37:13:51:ce:
b0:b1:c6:5a:f2:75:1c:47:45:73:69:d5:b8:39:29:
82:f8:fc:77:99:f0:06:52:1a:2d:35:28:ec:3c:dd:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:F3:8C:3B:71:12:64:70:36:0C:22:FD:19:D1:F1:96:97:37:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3d957a8-a439-3375-807a-999a25d7e06c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:4028::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ed:46:fb:de:e5:a2:56:66:c9:06:c0:b4:47:cb:92:19:b8:
89:de:1c:32:8b:2b:7c:ae:d2:e4:bb:50:93:df:13:70:c7:d8:
c3:a4:2c:21:ad:88:3b:f9:b0:ef:dd:5f:8d:b4:e5:f2:20:0c:
53:7f:b1:dc:6a:17:66:39:cc:df:19:25:c2:f4:c6:1d:94:f6:
f7:d9:3d:36:da:11:5f:9c:c9:de:bc:d6:63:94:42:33:4e:90:
85:f4:0f:21:53:ee:65:d4:e4:1b:30:3a:ca:c7:29:78:b4:9d:
12:60:2e:78:d3:02:c1:3c:9e:d6:14:da:f3:9b:70:12:b1:3f:
02:d6:62:4e:ab:d2:b7:65:1e:dc:c2:78:84:ba:15:2d:26:1a:
a4:b5:52:fd:16:7b:26:9b:6f:69:8b:be:28:85:b9:71:04:dd:
7e:e6:45:65:80:c3:80:b6:1e:30:33:1c:25:6d:ee:a4:31:70:
dd:5d:75:b7:ef:c4:47:c7:da:69:3a:1e:2f:5f:fc:4e:8e:b1:
88:aa:25:95:40:e4:61:9b:9a:65:02:0b:38:f6:5d:10:88:f3:
11:0f:ce:79:9e:b5:22:a4:8e:a4:84:11:d5:6d:64:9e:4d:83:
2d:00:d8:b4:38:73:fd:db:4b:eb:f4:20:8e:87:43:eb:76:c2:
9b:c8:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:48 2025 by rpki-client