Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa
File: 4738a0db-ee50-3a8a-9636-ac0584f52f61.roa (raw, json)
Hash identifier: PJ29ICs4lSzhh9Jv7Pk/CingAnOQF/+IfS1N5sTh4u0=
Subject key identifier: 90:B4:54:59:84:19:73:6F:75:D6:E3:04:6D:99:C6:37:FF:76:98:43
Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial: 010D0C9F43285848BBBB7999408C71653D07C280
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 14325
IP address blocks: 2604:a700::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:79:99:40:8c:71:65:3d:07:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=31934a37-2353-43a9-a9ef-7faceead240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:5c:ad:d4:16:4e:55:62:4d:67:6f:7c:e1:
0c:0d:01:ba:1d:4e:92:e6:56:ce:42:aa:97:8a:08:
b1:fb:51:69:b4:5b:f0:f3:03:d0:04:4d:5b:06:e4:
ff:e3:b0:47:95:d1:f4:75:49:5d:be:9b:33:34:39:
08:8a:04:a6:2f:31:21:0a:0f:28:1e:6d:6a:3b:87:
fa:7d:d8:65:19:48:f2:35:b2:49:81:b9:c0:ea:c4:
93:48:a6:40:fb:20:67:8f:36:60:8b:a6:98:1f:60:
d6:a7:b4:49:86:ed:6b:35:8e:88:f9:9e:bf:56:e2:
fb:3f:27:a9:c2:ba:a2:e7:74:c3:ec:b3:15:c4:c3:
db:b2:51:46:b4:f7:e5:4b:57:68:c1:d5:ca:70:66:
d8:c3:8d:43:a7:e6:21:ca:b4:58:91:d6:2e:75:2e:
c8:2b:0f:31:1f:a6:22:eb:3d:48:fd:45:2b:ec:ae:
70:90:bc:ea:2c:1c:74:8e:8e:e1:7e:79:c6:48:03:
a9:67:91:7e:8c:5c:09:ca:68:b6:0c:c8:f5:f6:0d:
fa:8d:d1:be:75:5f:9f:c8:25:cb:9f:aa:92:90:05:
0a:63:4d:aa:d7:2b:b4:d7:c8:d3:89:19:70:0a:69:
3e:56:a0:83:c1:8c:0f:e1:b9:25:3e:5b:49:f1:3a:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:54:59:84:19:73:6F:75:D6:E3:04:6D:99:C6:37:FF:76:98:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
X509v3 Authority Key Identifier:
keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a700::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:96:6d:c3:9c:3a:2d:31:08:a6:ac:8c:0f:b7:01:d4:38:0d:
3e:f3:bd:7d:8a:ed:8a:d8:82:17:3b:6e:ac:ca:12:4c:24:32:
b1:e3:33:62:a4:b5:7d:0a:5b:b9:59:5e:9f:8c:3c:f8:12:4f:
14:09:d8:0d:6c:65:06:3e:47:5f:45:0b:18:42:f9:e0:7a:98:
3c:e9:9f:fc:77:57:75:b6:80:9f:6f:e3:c2:2f:e5:74:ea:08:
3b:32:ec:26:0e:bf:8d:41:b2:7b:90:c4:0b:85:97:b3:45:89:
06:39:1b:69:5b:f0:79:de:30:da:54:66:62:fb:ea:8d:7a:a5:
b2:0d:26:89:73:43:43:82:02:57:3d:0c:3f:e4:a6:a3:64:01:
f9:6a:52:4f:18:3d:b5:bb:66:ae:21:84:ff:f1:ee:cc:c2:c7:
d1:95:9f:ea:50:9f:7f:9b:aa:57:34:d4:93:d8:ab:a0:69:30:
ed:bb:71:2b:da:56:ab:01:e7:a5:b0:01:ae:b5:72:6b:c4:a1:
8f:c2:ef:fc:2a:d8:15:b5:d8:bc:69:18:70:56:a6:ea:29:50:
e0:47:2b:34:04:51:c1:75:5e:b1:09:91:62:42:aa:25:b8:1b:
54:f4:66:9f:80:ba:fd:ba:93:47:13:43:87:f8:e9:5b:ca:46:
88:74:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:58 2025 by rpki-client