Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/877255b8-cb33-3803-8908-41e712168981.roa
File: 877255b8-cb33-3803-8908-41e712168981.roa (raw, json)
Hash identifier: dAi2G27zgssHLE+W9mXWAoc95A4o44F4ouwrknQkGPI=
Subject key identifier: B1:A9:7A:A1:DF:7D:A2:99:96:9D:EB:8D:8F:FA:14:91:A1:FF:B5:73
Certificate issuer: /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8
Certificate serial: 010D0C9F432858493ED3D78C4A7309F298373300
Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/877255b8-cb33-3803-8908-41e712168981.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 400764
IP address blocks: 2606:f2c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d7:8c:4a:73:09:f2:98:37:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=21a0f45e-425b-4029-8562-62da2e815ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:7e:20:aa:52:f2:a0:cd:56:82:a6:8e:22:
ca:76:6b:04:a2:3b:a7:02:01:dc:94:b3:ce:13:25:
2c:50:ff:e2:0f:91:e3:39:c7:7b:4b:99:b8:6e:ee:
dd:94:45:82:d9:c6:2d:4c:2c:ce:bc:c5:b5:9f:30:
b2:13:93:7a:68:b2:6e:47:f3:11:7e:c2:2f:11:ce:
a3:52:fc:87:46:ab:2c:a7:d7:35:55:a1:da:d1:3f:
36:a1:9c:00:c9:93:10:df:17:dd:5c:a2:d5:0b:d2:
54:f5:02:50:22:33:01:9e:8c:5d:1b:8b:22:64:81:
0f:84:ff:3d:68:ad:1c:b9:fb:3c:2e:03:43:19:fc:
98:0c:29:d1:b7:8b:b9:46:d5:c7:42:43:a1:67:09:
8e:e8:30:e7:4e:bd:cd:07:ee:b2:35:5e:47:46:87:
ff:3c:80:c1:50:85:2f:35:d0:4e:fe:f4:49:07:c2:
4c:6a:5a:00:a4:1f:f6:fa:ab:7f:47:00:b5:3d:c6:
39:23:23:2e:ef:29:10:af:4e:22:7c:38:74:99:78:
b9:f5:a8:db:55:c9:c8:5d:a7:9c:07:00:b5:58:58:
c9:35:95:6b:5e:09:43:c3:6b:20:f1:6b:f9:0a:c3:
db:8e:c5:12:1f:c0:ad:2e:a9:8d:10:73:05:43:16:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:7A:A1:DF:7D:A2:99:96:9D:EB:8D:8F:FA:14:91:A1:FF:B5:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/877255b8-cb33-3803-8908-41e712168981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl
X509v3 Authority Key Identifier:
keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f2c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:15:a0:51:46:8d:a5:53:00:ce:9e:f3:1d:2f:38:69:55:e5:
6b:c7:b1:18:ed:ae:cd:2e:46:3b:b0:4e:3d:01:33:99:04:19:
40:4c:d1:c0:0e:b5:a1:73:5b:38:a2:54:bd:63:97:91:49:90:
94:27:f1:5d:1b:5a:e4:bf:52:d0:f6:d1:10:d9:4c:f7:3b:e1:
0a:01:bc:a0:e6:c9:49:e3:a5:80:5d:7f:0a:35:af:70:e9:72:
0b:03:3d:a1:0e:47:e9:23:a8:53:77:28:7d:1a:f3:6f:d8:fb:
e4:97:06:6e:42:da:61:8a:71:06:09:05:de:f7:63:d0:7c:60:
5b:53:87:47:19:b0:53:31:38:35:07:77:ba:e8:78:70:c9:13:
2f:01:d6:17:e1:75:79:0b:38:ae:2c:68:4a:04:91:0c:de:10:
2b:7a:26:f8:9b:f7:19:99:42:b9:16:00:6a:c1:92:04:06:2d:
0c:0c:96:3c:9c:3c:d4:cf:5a:84:0b:db:cf:ce:23:a9:52:a8:
89:c0:b9:b0:bc:b4:4b:43:26:a7:55:f8:ff:95:05:37:8e:ee:
f6:04:90:7a:91:cb:bc:22:e9:07:d6:88:40:8a:f0:b8:60:98:
5e:d8:fa:dc:78:6d:1c:cb:8d:64:6c:c3:df:68:51:45:fe:8a:
45:85:b2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:22 2025 by rpki-client