Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/b95e3b07-74fd-3245-9562-fe15bdde76cf.roa
File: b95e3b07-74fd-3245-9562-fe15bdde76cf.roa (raw, json)
Hash identifier: QYoZPQ+/T49SlNKLULggC2LMs2NGtSQTYFrb+x5YA+U=
Subject key identifier: 72:0E:1D:BF:7B:2D:60:AA:8A:9F:85:A2:7C:0B:49:88:57:A5:BA:31
Certificate issuer: /CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
Certificate serial: 010D0C9F4328584897708B99A2FB8D9E35B22240
Authority key identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/b95e3b07-74fd-3245-9562-fe15bdde76cf.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 394896
IP address blocks: 2607:1740:2000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8b:99:a2:fb:8d:9e:35:b2:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=7b266baf-2472-4433-897f-920e58072b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:16:02:41:d6:42:e6:0a:8b:f2:bd:fb:71:
f0:a1:ae:8a:d7:f2:a3:bd:5f:fc:c8:a6:d3:2b:33:
5f:9f:dc:dd:2c:d4:3f:fc:e1:5f:36:33:a5:e1:b2:
9f:b7:8a:f4:96:73:01:46:16:b0:dd:95:c7:e0:84:
fa:f7:9e:a9:e5:88:af:54:7c:60:6a:75:65:59:63:
ee:98:b4:aa:66:97:ec:e3:dc:85:76:a9:b3:67:f3:
7c:86:9d:ab:34:71:be:d1:cb:a2:94:8a:98:10:36:
17:1e:ac:01:50:39:44:c2:03:38:c9:1b:7c:ab:0a:
74:a8:24:08:2e:91:53:b9:4d:f9:d7:cc:02:a8:6e:
7b:f9:e4:56:a1:c3:d3:02:ca:88:36:8e:4c:6d:ed:
cc:57:e8:79:93:34:18:d0:ae:28:eb:de:ea:96:d1:
40:b8:19:fb:35:0e:2a:b5:48:eb:46:f5:1c:a7:5a:
a8:8b:d7:65:09:87:62:30:fa:54:3a:43:52:b8:41:
74:22:aa:70:c6:4f:54:38:61:59:b5:dd:0f:ba:b9:
25:3d:c4:13:b7:05:c7:6d:c8:68:61:68:88:fe:f6:
13:f5:97:0a:c1:09:78:e2:6b:a0:af:ea:1f:ee:21:
47:35:a2:09:be:35:04:af:4f:74:df:96:3e:bd:7e:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:1D:BF:7B:2D:60:AA:8A:9F:85:A2:7C:0B:49:88:57:A5:BA:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/b95e3b07-74fd-3245-9562-fe15bdde76cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl
X509v3 Authority Key Identifier:
keyid:81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:1740:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:29:54:91:ad:5c:4f:09:67:37:29:ed:4f:bd:44:34:94:d5:
c4:d4:9f:f5:c6:c9:92:e0:b4:60:08:9e:d8:12:cf:47:b0:6e:
01:d1:1b:12:d0:43:01:0e:48:72:52:02:7f:c8:ff:ea:eb:f0:
bf:d3:aa:c5:0d:eb:b8:5e:c8:33:bd:52:c2:7b:d1:ed:cc:0c:
c8:23:5b:b5:03:90:a6:13:29:be:e2:a0:9d:c1:7d:d9:a8:5d:
b0:ab:0b:ef:d7:47:a7:b8:f2:b8:2b:1d:df:db:49:43:df:9d:
be:4c:6d:55:4a:35:dd:c2:30:a9:90:4c:9c:e0:24:60:3e:32:
04:b4:0d:6b:98:82:f0:4f:60:a3:88:12:b8:03:01:27:6e:32:
2e:a5:08:a2:39:76:01:f7:09:c7:39:12:e4:d0:c8:a5:5a:71:
3c:d7:2b:c1:99:2b:4b:1c:d8:0a:74:9f:d0:39:e6:67:c8:71:
c0:26:d8:7a:71:8a:fa:a5:c6:25:fc:bd:b6:aa:70:49:76:48:
fb:e8:c0:3a:65:a5:9c:95:ce:06:07:4a:c8:fe:de:33:39:34:
cf:65:66:65:47:cd:dc:d7:b3:5e:52:c1:b7:56:cc:06:43:65:
48:a6:53:16:d5:ee:83:b9:cd:69:c2:e0:82:c4:dc:f9:48:83:
69:0e:8c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:50 2025 by rpki-client