Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
File: 35003c30-30bb-36db-9212-03de41a7d417.roa (raw, json)
Hash identifier: JQkRbr0WGrnLdueYlhsNqQ4DWsFpcNXbE8tdI3Nj0rM=
Subject key identifier: 31:11:68:DC:39:94:DE:43:A5:0F:76:9B:51:E5:76:52:9D:A8:DE:25
Certificate issuer: /CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
Certificate serial: 010D0C9F43285848BE862603F06D95C4D3671D00
Authority key identifier: 94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 2606:200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:26:03:f0:6d:95:c4:d3:67:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=80f14742-d657-40e1-b133-70b63afeff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:51:42:de:1d:4c:7e:29:6e:77:ba:c6:2c:
93:85:05:c5:1e:c7:5e:8a:20:dc:cc:2d:e6:93:cf:
6f:d7:d7:be:13:48:36:5a:51:ca:41:04:d2:76:08:
bc:db:23:d7:da:34:45:43:19:b9:fa:5d:6f:bd:5e:
88:d1:d5:00:52:2b:19:c6:97:ad:b1:88:bf:06:03:
88:4f:ab:1d:4c:5f:c7:b3:35:e0:54:29:6c:85:1e:
17:26:50:2f:bd:10:4d:b4:13:1f:a8:89:f2:25:92:
9f:09:f7:93:87:0d:6d:06:d5:48:47:4c:09:18:13:
df:8a:f9:0f:c6:9e:79:72:37:49:81:73:a0:11:74:
52:9c:83:f6:91:90:01:d6:42:21:b3:56:9a:e8:cf:
32:98:20:13:6a:86:01:42:fa:5a:6f:2f:85:5a:13:
fb:63:6d:f4:bc:cd:e8:02:cd:2a:fd:ea:e3:71:72:
e9:77:b9:ca:de:fe:38:db:42:0e:79:64:1e:d6:b6:
0b:fb:00:ed:9b:9a:f2:fb:aa:9a:64:6b:1d:96:c6:
f8:45:08:50:31:b9:b9:54:fd:c6:a0:ae:50:8d:53:
97:e4:c6:2b:09:5c:03:c0:82:c3:3a:82:c9:21:87:
82:45:d3:e5:66:85:93:7f:55:d0:da:a4:0a:bf:b5:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:68:DC:39:94:DE:43:A5:0F:76:9B:51:E5:76:52:9D:A8:DE:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl
X509v3 Authority Key Identifier:
keyid:94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:200::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:65:2b:54:20:f7:9f:67:31:59:c8:37:ff:d6:de:3c:d3:c0:
25:4f:8a:08:91:6f:e3:57:2b:9c:0a:15:d9:25:7b:72:6e:28:
9e:10:b9:f0:85:54:d2:93:50:a8:ae:aa:c9:56:73:cb:f1:08:
1c:cf:81:0a:b5:4f:f9:6c:88:60:4c:6e:d2:9b:ce:2d:83:d6:
ee:b5:09:4c:4e:17:95:6b:4f:1c:61:62:05:c1:c7:5b:7c:e7:
9e:c0:ba:7d:b2:00:5b:9c:54:1c:d9:ff:20:0e:72:3a:eb:a1:
73:bb:94:64:a0:7c:ca:3b:59:2f:b1:25:f4:eb:f1:df:10:6f:
69:85:53:e9:dc:03:2a:5f:f0:a7:34:8c:b6:9b:52:05:51:38:
cd:5f:f5:df:02:50:88:7c:e3:d1:a9:c7:5c:4c:3c:8f:70:20:
ac:a1:e3:ab:63:fb:0c:02:da:8b:7d:41:cc:6f:b2:d0:24:d1:
cf:37:92:58:a8:53:43:46:1c:69:2c:32:01:1c:e8:23:6d:3e:
1e:3d:b3:1b:d6:78:72:28:32:9f:49:db:8f:59:48:2f:72:26:
ff:b2:28:76:bc:a4:94:94:cf:33:a8:6c:57:76:ff:d5:12:ce:
d5:a7:a7:f6:f4:25:19:b6:ac:ba:a6:b8:cc:40:2d:1f:e0:1b:
2a:98:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:06 2025 by rpki-client