Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2214cd70-e016-3d9f-885d-1bece7dd3623.roa
File: 2214cd70-e016-3d9f-885d-1bece7dd3623.roa (raw, json)
Hash identifier: 8zCR28LRWHsPZ6Z1T7R+eg3vluOGjkfFggLgIoldl3o=
Subject key identifier: 26:53:37:86:83:4C:AC:FE:B6:4B:1A:C9:F4:6D:B8:47:6B:17:83:2F
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F43285848C6E62FB0EF14C94044BFBD80
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2214cd70-e016-3d9f-885d-1bece7dd3623.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 136557
IP address blocks: 2606:fc40:4003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2f:b0:ef:14:c9:40:44:bf:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=fe5794f0-5846-47cf-b002-6e48424c8368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:b2:9c:cb:bf:e5:05:6b:0e:53:85:67:ab:
87:2c:bc:31:9f:2e:55:99:f8:83:1a:15:36:5d:a3:
89:ec:fb:2f:b8:5f:24:e7:8f:5b:b3:c3:a0:bc:78:
05:38:6c:24:bc:e2:3b:ab:e8:f9:57:48:81:9d:06:
bf:9d:52:8f:ac:b9:9d:4b:33:8c:05:65:98:34:15:
63:7e:91:fd:69:ba:d8:30:dd:d6:cf:78:64:df:0f:
ba:9e:9b:ba:63:d7:63:7c:7d:2e:1e:09:2b:d6:3c:
3b:f6:7f:a4:18:e6:a9:99:e0:bd:79:1b:a1:e8:ca:
e3:5f:b9:11:cb:92:99:96:b1:92:14:bb:49:e7:d9:
30:59:28:7a:73:27:dc:b5:62:82:3e:46:7f:7c:9e:
de:d3:25:1d:ed:5e:38:63:6f:13:27:61:35:7d:9f:
41:62:ca:07:36:92:40:79:e8:12:80:35:bf:07:8b:
81:64:b4:21:77:ec:bb:7a:52:47:5d:aa:32:c7:4d:
c1:17:fc:0e:e5:da:71:52:29:17:68:8e:21:12:eb:
34:94:d2:2e:8e:e7:f7:46:95:d6:cc:88:66:94:72:
3d:b2:7c:e4:28:66:c9:95:59:8c:0c:ec:e8:10:3c:
76:b8:f8:7f:fc:17:c8:92:9f:5d:ff:3d:55:0d:44:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:37:86:83:4C:AC:FE:B6:4B:1A:C9:F4:6D:B8:47:6B:17:83:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2214cd70-e016-3d9f-885d-1bece7dd3623.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:fc40:4003::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:94:ed:43:9c:a6:fe:64:3d:bc:1a:8d:5c:11:c2:41:e5:61:
fc:8f:cb:aa:e4:ef:61:52:2f:07:67:b7:a6:b3:9a:07:73:5a:
4c:58:f9:89:16:07:5c:73:75:80:01:32:41:8d:18:2a:bd:07:
54:cb:0d:78:15:31:65:85:e9:17:d7:ad:bf:34:54:93:1d:45:
12:0d:57:40:5b:b2:2a:10:ac:19:02:62:e1:12:0c:d5:b1:2c:
8f:fb:af:7f:16:5b:9e:79:22:f9:6c:28:73:1f:83:a4:3e:ec:
89:b7:c7:0e:86:97:23:e2:a9:ee:55:14:2a:75:f9:59:9a:50:
cb:3d:79:9b:2b:d0:4b:b1:e0:df:97:cc:a4:c1:9a:5e:3c:7b:
74:cc:24:a7:e4:45:38:38:3b:f2:a8:8c:b2:7e:fa:51:2f:71:
fb:7f:a4:a8:86:9f:a3:f4:88:df:c5:47:ae:43:b2:76:00:45:
ac:9f:f5:57:cf:17:54:d0:92:18:ad:1e:ef:c7:b5:48:a0:68:
0d:12:2e:92:a3:c9:ff:84:39:8e:46:3a:ad:5b:7b:1e:1d:2f:
eb:ac:45:db:7c:c5:43:37:99:9b:82:c0:13:a0:96:bb:96:78:
9c:7a:30:77:10:0c:46:6c:ea:5f:c1:e6:71:1b:ea:27:c7:f1:
a6:8b:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:07:00 2025 by rpki-client