Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa
File: f7f4c100-078c-3097-ac67-9c6eaa96367e.roa (raw, json)
Hash identifier: EY1RymRjb5PbE4k4WhrF8y7D9HFFfwBt1jBRntIYE48=
Subject key identifier: 35:81:4D:F0:12:85:D7:E0:40:A5:8F:F5:D8:CA:4A:B4:D6:CF:E4:F7
Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial: 010D0C9F43285848D64108219277263FF472B800
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 399045
IP address blocks: 2606:d640::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:08:21:92:77:26:3f:f4:72:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=f17d3324-7d28-49e1-bfb9-8348996a72ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:0e:35:f9:bb:df:af:e0:e7:20:85:4d:f0:
e2:04:35:95:86:99:40:7c:10:d2:3c:6f:92:a2:f7:
b5:b3:17:0a:fa:f4:fb:1a:b3:13:83:3c:e5:65:f4:
92:b9:20:b1:40:b7:d3:69:b7:82:50:03:bc:61:78:
5c:f1:37:da:46:21:24:e4:06:fa:cf:c2:08:bb:49:
af:93:c6:77:f5:c2:85:6a:85:eb:e8:01:9d:f6:ca:
d0:64:a4:7e:3d:1c:fe:32:e1:a6:02:84:41:5d:65:
28:14:7f:21:c6:ae:4f:11:8c:1a:74:2a:e3:ba:5e:
c9:a6:46:44:d1:5e:b8:a6:d7:da:68:90:ca:43:d3:
cf:e6:85:ca:33:49:a7:4f:e4:2b:5e:bd:55:9c:39:
6f:61:93:e7:74:2e:5c:8b:c3:05:9b:6a:80:af:b0:
b7:eb:f3:30:98:d2:e5:48:0e:d0:05:e6:f6:9b:35:
26:db:11:da:3b:51:d5:a5:1b:5b:29:94:6f:93:4d:
e1:12:be:78:4f:81:d7:6d:e8:84:e3:67:a6:6b:3a:
d4:f4:ea:d7:61:f9:ad:53:f5:bf:f3:2f:9a:62:d5:
ae:4a:65:1c:02:75:ce:1b:bf:c4:07:c6:56:fe:62:
9f:71:75:5e:80:75:96:9e:6b:7f:54:a1:07:99:d5:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:4D:F0:12:85:D7:E0:40:A5:8F:F5:D8:CA:4A:B4:D6:CF:E4:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
X509v3 Authority Key Identifier:
keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:d640::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:2b:0a:6e:10:43:c3:9e:29:4a:5f:e4:ee:40:8d:2c:47:19:
cc:03:a9:ed:f0:bd:a3:fe:e4:95:c8:4b:cc:63:f0:94:9e:57:
6b:5d:cb:b1:aa:ed:95:f7:c0:a9:82:ff:6e:c5:fe:54:77:7c:
39:9c:32:83:5c:b7:9d:2e:84:ec:2e:99:c0:bb:df:06:8e:7c:
ae:2a:9a:e0:36:0f:85:15:47:5e:d1:18:bd:b4:47:7c:01:ef:
c1:db:9d:28:ef:e3:65:c4:70:2c:99:51:bf:56:2c:29:eb:a2:
f2:45:44:66:26:06:ae:47:34:e0:ae:eb:38:45:fc:9e:e5:bc:
ac:fb:15:26:4f:b2:58:f8:3c:a5:70:11:25:46:39:9c:3e:26:
e0:4f:39:13:41:2d:80:ce:fa:89:e5:4c:e8:9c:64:d0:fc:38:
6f:45:d2:21:73:ae:bc:54:00:16:db:de:78:57:87:25:1c:fe:
16:57:ca:33:80:88:f7:1d:d5:36:39:b6:93:91:a8:e3:fa:69:
42:6d:bb:27:87:62:47:fb:e9:e7:53:60:e8:88:17:43:77:e6:
7c:06:57:27:99:44:39:31:9f:fe:ce:9b:35:9a:a7:7a:1d:d7:
fd:a5:75:80:6e:c3:7c:32:e5:fb:c1:84:b4:18:66:54:ee:69:
51:4f:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:20:07 2025 by rpki-client