Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa
File: efecd37b-b85c-330f-a2a8-5abf025d13d8.roa (raw, json)
Hash identifier: KMp+uh4/zq+KS72MeLVrHeSM/gAoR60Tu3DC4kJkrsE=
Subject key identifier: 4F:68:01:78:A4:BB:69:8E:E8:6A:9B:3C:C3:30:5A:96:AE:E2:D9:29
Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial: 010D0C9F432858494B64127F82ACD2F5A51B6A9F
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 22773
IP address blocks: 2606:8940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:12:7f:82:ac:d2:f5:a5:1b:6a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=e0d9d6b3-24fe-4536-b5a3-8d35c64981f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:05:8b:bb:17:47:fb:48:36:97:25:ad:fb:
73:a0:95:07:d0:83:cb:0c:3f:bb:2c:40:5d:70:6c:
28:63:5f:21:a8:b1:77:fc:d9:17:9f:e0:37:b0:33:
ed:52:2f:d6:54:ea:3e:ee:d9:3e:ee:25:f4:aa:56:
e5:96:1d:94:af:e4:e6:aa:95:37:dc:97:87:df:19:
b1:ca:90:42:08:21:50:9e:ad:93:00:e7:d9:ce:02:
0d:ec:d4:13:8f:e9:77:36:c1:ee:14:7d:b8:1b:1c:
93:78:51:89:ab:d8:34:62:83:13:5a:b5:c2:7d:2f:
f8:1f:a6:42:ae:cf:3a:65:31:ec:d0:4a:38:3d:46:
73:cb:66:d4:12:fd:ea:e7:4c:79:f8:ee:fe:a1:30:
34:d2:36:13:8d:16:bd:74:a5:7e:ed:9a:d7:15:db:
6c:41:2f:17:0a:87:b8:42:89:0d:f7:ea:ce:42:eb:
1a:9b:ad:36:bc:f3:59:ec:b6:ef:0e:f5:b0:3b:42:
8f:98:14:b3:c6:18:8f:bc:36:61:35:b1:0c:57:07:
27:75:b2:6a:35:e3:8e:f6:08:22:1e:60:89:c1:88:
d4:51:c8:a6:72:a2:65:ff:ae:d4:5c:83:a0:1e:62:
bd:92:dc:f2:1e:23:a6:29:ed:76:0e:97:82:72:19:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:68:01:78:A4:BB:69:8E:E8:6A:9B:3C:C3:30:5A:96:AE:E2:D9:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
X509v3 Authority Key Identifier:
keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:8940::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:95:d7:59:f1:c4:92:70:a5:6b:99:fa:04:79:f0:7a:be:8e:
9a:57:57:16:10:cc:db:34:70:71:40:f5:a2:82:d2:ee:ce:ff:
ce:f1:d9:77:12:15:66:ff:28:fa:f3:b8:02:d3:27:d6:be:54:
c6:27:45:5e:1f:4a:89:09:b9:ba:76:b0:6a:c6:2d:1c:a2:4a:
ba:28:54:5b:9d:65:ef:e4:c5:0b:5f:7e:fe:f8:c4:79:71:08:
7a:d6:33:41:19:15:0f:d1:2c:10:5d:b4:f7:4c:23:cb:9c:48:
d6:67:90:84:f5:6d:bf:25:80:1c:07:cc:4e:3c:bd:60:f6:fd:
63:1d:ad:6f:4b:6a:c4:c7:d5:eb:6f:6c:50:21:f1:2a:69:6a:
ee:19:2a:c8:e8:49:d4:d7:46:2b:78:ec:0d:4a:c2:4d:2c:37:
b5:df:a0:93:7d:fc:7f:36:48:16:8e:73:e5:30:16:cb:22:f9:
75:5a:ea:20:67:d9:3d:d6:ed:db:dc:46:2e:de:da:0e:96:de:
bb:72:6a:ac:79:73:fe:eb:a5:81:1f:af:9e:e0:bc:55:0e:46:
22:a2:d3:b0:3c:f4:f8:65:ba:31:f4:94:6c:d1:a5:5a:3e:94:
14:25:5f:b3:c8:6f:81:c5:6a:80:d6:ea:e6:95:79:03:90:87:
c4:8a:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:46 2025 by rpki-client