Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/0a9b9a7d-cc6e-330d-8f94-31f64faa76f4.roa
File: 0a9b9a7d-cc6e-330d-8f94-31f64faa76f4.roa (raw, json)
Hash identifier: EYIT68zaEP9u8I/W5Wp3+joBtVoTaioMmsd6NFd+Umw=
Subject key identifier: 21:22:C9:CF:37:3B:C6:13:1E:A4:9A:BB:47:10:6E:C2:C8:E9:9F:CD
Certificate issuer: /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial: 010D0C9F43285848A830A1D1A8A6895CE362F2C0
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/0a9b9a7d-cc6e-330d-8f94-31f64faa76f4.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 7029
IP address blocks: 2604:354a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a1:d1:a8:a6:89:5c:e3:62:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=efc0b4f3-7dbc-44b8-9de1-742821ccefae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:c8:e1:49:d5:c1:72:da:30:7e:75:cb:08:
ff:4f:85:da:27:34:dd:40:01:18:64:f8:4d:f3:cd:
5e:54:3e:28:05:21:14:a1:3a:b9:27:7d:98:4e:b5:
ca:5b:eb:90:08:9e:c5:25:19:2b:71:6e:6a:f8:32:
98:67:05:ba:9b:86:67:4e:bb:75:bf:5c:d9:63:3e:
b8:97:2b:53:5c:e8:45:1f:ad:ab:78:ec:c5:80:83:
a8:08:7d:b5:f7:b2:14:6f:4d:84:39:4f:80:1f:a6:
c5:e9:74:6e:a1:a3:0c:5e:89:25:12:79:66:1f:0e:
eb:43:95:8b:02:07:7d:d0:c2:75:49:52:19:f6:f1:
75:e8:5b:70:cb:19:e0:e4:58:5c:0a:b5:20:f4:b7:
49:c3:14:62:d9:bc:7b:b0:ac:19:ed:02:dd:81:41:
cd:11:04:5c:dd:0e:e7:86:20:96:83:d5:85:cb:bd:
40:73:a2:62:0f:ee:e8:c2:0b:5f:21:72:56:df:0c:
cf:7b:cb:e5:0a:62:53:95:15:8f:66:d5:d2:60:df:
56:f9:b8:ea:55:dd:31:39:45:2a:bd:bd:6a:54:ad:
ea:76:b6:d7:ff:9b:3c:13:5f:76:2c:33:3e:a0:b7:
ef:c3:b0:59:e4:33:2d:ae:14:13:31:35:78:fd:90:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:C9:CF:37:3B:C6:13:1E:A4:9A:BB:47:10:6E:C2:C8:E9:9F:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/0a9b9a7d-cc6e-330d-8f94-31f64faa76f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl
X509v3 Authority Key Identifier:
keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:354a::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:78:23:0c:d3:93:09:d2:37:74:e4:37:8a:80:ba:15:7a:81:
28:7e:b6:e7:f2:72:50:12:ca:df:f9:f3:e1:80:fe:58:d4:55:
e4:73:a6:cb:23:5a:37:2c:a6:8f:78:9e:ac:39:09:75:68:77:
7e:2d:c2:85:8c:ae:ca:6b:95:b8:d3:05:eb:33:79:3c:c1:5e:
0d:93:f3:2b:4b:eb:fb:92:85:d4:c7:52:36:cb:af:ed:87:0f:
d7:a4:98:cd:73:4f:f4:85:da:94:7f:9a:9b:3a:dc:8a:6a:d1:
5b:70:d2:62:3f:23:63:c8:8e:98:c8:3a:6e:f4:c2:4e:06:a1:
4e:74:82:e5:4e:f9:86:d0:65:e9:1a:b1:3e:f8:85:d0:f9:df:
02:7c:ef:ec:7f:65:87:e8:d0:f3:21:9b:40:b2:b1:45:82:45:
ba:23:c5:c1:0d:ac:1a:af:8f:0e:13:a0:15:e9:53:19:71:6f:
dd:4e:3d:60:3c:9c:d5:a3:13:e0:a2:d6:37:93:17:01:00:f9:
41:78:f7:55:41:fe:0c:b2:52:60:a5:8b:b0:5c:c6:52:37:7c:
29:15:03:5d:42:d4:8e:fb:15:90:37:6b:99:86:a5:3d:75:67:
a1:60:fd:eb:a6:75:a6:23:e9:7e:c3:8e:ab:22:b6:fa:b0:ff:
38:7d:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:06 2025 by rpki-client