Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a85ddf5-8850-39b9-9784-3cfb987eddb4.roa
File: 0a85ddf5-8850-39b9-9784-3cfb987eddb4.roa (raw, json)
Hash identifier: 63G1dfiS2x01BR/R0O0u+eedr+hjqjJnRDYx8yzGa2M=
Subject key identifier: BD:1F:95:29:AA:8C:1D:A0:BE:C5:BC:70:63:C3:AD:94:CC:0A:B2:C9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FE9E7558E97524B2B7B900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a85ddf5-8850-39b9-9784-3cfb987eddb4.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1010:d1a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:9e:75:58:e9:75:24:b2:b7:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=5586cc46-0b38-4ed9-a0a5-9c36176cb8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:ec:06:9c:1f:47:27:69:34:7a:0b:93:3f:
11:7f:be:3a:5f:23:33:dc:80:34:99:6d:c8:c3:1d:
ee:50:3b:52:ac:3f:a4:95:33:20:4c:07:bf:1b:1a:
1c:e4:63:8d:36:ed:a9:9e:45:0a:d9:2f:dc:a4:6f:
87:d6:1b:5d:1a:aa:76:a9:de:5c:4f:61:e2:d1:f5:
39:ae:27:00:e2:a8:50:5b:b9:e3:fb:f9:ff:84:f5:
9e:f0:c5:1c:42:a9:cf:b9:23:76:83:38:d2:e2:da:
ed:87:2a:93:50:00:58:f0:e8:cc:dd:29:59:86:61:
0f:cb:f5:9e:7d:a9:25:6c:7f:aa:d6:90:a6:4a:c7:
f8:e9:d8:0c:d1:e4:1c:bb:41:02:5d:4c:58:de:1d:
cf:af:2c:62:e3:43:ed:9a:de:89:19:9d:00:33:2d:
68:e5:82:ef:19:ed:8e:b1:f0:39:7b:69:2d:11:51:
ef:57:3b:36:3d:81:0c:d5:32:94:a8:fd:08:66:82:
a6:df:fb:cc:9d:0a:5d:3a:48:dd:25:87:19:4e:92:
28:11:87:c6:96:a0:b9:8e:5a:1d:a2:65:1c:c0:10:
d3:7e:cb:12:c3:3a:ba:df:28:7b:3c:0c:9f:a0:32:
94:be:9d:d2:ff:d0:91:2a:49:18:87:57:79:a5:f9:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:95:29:AA:8C:1D:A0:BE:C5:BC:70:63:C3:AD:94:CC:0A:B2:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a85ddf5-8850-39b9-9784-3cfb987eddb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1010:d1a0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:3f:f2:fa:7c:e5:02:0e:75:34:d9:79:2a:d1:1c:63:82:cc:
58:dd:42:b6:c7:7c:f2:cd:af:dd:f9:35:ed:6c:d8:3e:f9:88:
8f:b1:06:6d:88:18:25:01:54:f1:6f:44:79:37:38:6b:55:fc:
a4:2c:ec:f7:6f:af:18:3f:a1:3b:58:60:81:82:9e:de:16:dd:
3b:38:61:e4:c0:b7:c6:22:59:59:28:c9:ba:5d:82:ab:0d:dd:
3d:dc:ad:35:03:3d:3e:30:21:a0:20:33:42:f3:b1:c5:be:fc:
2d:32:b6:6c:9c:9d:19:6d:c8:a7:fa:84:e1:f5:6f:da:d3:90:
d9:d9:d1:0f:74:88:33:86:3b:97:28:bf:e4:19:07:09:96:a9:
b1:74:6c:d2:6a:5d:9f:ec:45:0a:5d:13:3c:f4:0a:61:40:a4:
40:b7:ca:c5:f8:77:60:14:b2:b2:5d:3e:38:b9:c0:65:5d:81:
68:4c:6f:16:04:a2:4a:78:fb:83:0a:6a:1d:0f:15:9f:1a:ee:
e8:07:ea:64:73:8f:6a:ae:39:ce:0a:52:d5:64:ca:1b:9f:11:
81:b0:d4:d7:f4:5f:9f:ee:0b:07:c5:cd:33:26:e3:1e:d1:73:
31:99:cf:bb:b8:cc:02:c5:34:72:c8:fd:0e:32:2f:26:b7:41:
5a:36:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:17 2025 by rpki-client