Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f496490-9129-3812-aa81-75d71b89bab3.roa
File: 0f496490-9129-3812-aa81-75d71b89bab3.roa (raw, json)
Hash identifier: Lfshb6tE0lpeGwITtvptz06LNPWjdRjyykQGSMkPfKA=
Subject key identifier: 28:BB:4B:F5:71:DD:8A:7E:49:AF:11:2B:71:3E:95:C8:24:EE:8E:45
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400EBD521244FEDDEF29800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f496490-9129-3812-aa81-75d71b89bab3.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100d:a121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:eb:d5:21:24:4f:ed:de:f2:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=dab99f73-1098-4795-8373-d0b79e9206a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:6f:5d:fb:e6:91:40:51:96:5e:bd:66:67:
e3:ec:61:fe:57:06:81:97:f2:4e:28:c5:2a:e0:eb:
2d:bc:6b:86:04:34:91:5d:d3:e6:f0:5f:54:06:63:
99:14:85:5f:f1:46:e6:fd:b0:9b:96:d3:da:86:6f:
d5:e9:f0:2b:07:d6:bf:15:84:cc:d3:4f:e0:c8:82:
00:0f:5f:84:f7:61:58:ae:81:f8:bd:aa:f2:27:bb:
6b:ae:c4:85:c3:a0:4f:ff:65:99:53:c7:cb:e4:01:
03:1f:ca:f0:a7:08:53:ee:43:cd:dd:be:d0:63:3b:
52:93:4a:5f:84:0c:01:a4:ae:59:91:7a:7d:62:da:
2d:3c:c9:51:72:12:1b:0a:b6:e1:19:d5:d7:f0:4d:
03:3b:0d:d5:a1:71:8c:bc:b6:7c:37:8d:d2:f9:72:
8a:ab:85:12:e0:fa:84:64:5f:2d:54:39:24:0f:3d:
ad:40:b2:37:d4:69:1c:8d:24:f1:74:41:bc:24:89:
d1:7d:9c:51:7f:a6:33:ea:0d:94:3c:eb:51:11:c7:
74:6d:59:8e:f4:12:45:57:c1:a7:b3:aa:c6:f8:d6:
ef:8e:e2:9e:21:70:b2:33:27:2d:e7:a2:f7:b2:97:
ae:10:06:8d:7e:e2:57:a9:99:95:a3:ef:e0:6a:76:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:4B:F5:71:DD:8A:7E:49:AF:11:2B:71:3E:95:C8:24:EE:8E:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f496490-9129-3812-aa81-75d71b89bab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100d:a121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:9c:a5:37:83:e1:c3:37:0f:0b:8c:6a:d4:28:75:35:e4:9b:
36:0f:af:8d:6e:fd:f5:0c:8d:09:bb:13:00:a8:b3:4d:01:e0:
77:8d:22:6f:0c:3b:29:71:6c:e6:7e:25:dc:89:48:ae:2d:5e:
6e:32:21:ca:a3:41:28:63:22:15:07:21:ff:8b:4a:13:a9:69:
d6:b3:2f:bc:9e:87:ee:43:b7:1b:e7:0f:f9:07:cc:98:2e:0f:
73:3b:e5:70:85:8e:8e:28:8e:fd:43:fe:68:43:16:c7:e0:8c:
09:16:03:40:e7:a6:b9:59:c8:f6:cf:32:b6:29:42:2d:38:2c:
9b:f7:54:07:31:ce:de:fc:e5:62:3d:42:e3:3c:f2:e1:6d:7d:
26:f3:4c:89:36:1c:ce:ff:cf:06:5c:99:95:48:fc:f5:29:06:
b2:be:e0:04:b3:92:0d:ce:31:04:11:fe:b8:12:db:d4:46:e2:
3e:9f:1c:23:36:2f:35:68:38:37:b0:cf:9b:9b:01:5f:4e:01:
89:ca:02:08:cb:58:ec:94:a7:34:90:ea:16:fe:2c:79:4e:59:
1a:05:86:a1:ba:7d:63:16:ac:e1:65:4f:d4:1b:6f:5f:f9:3e:
d5:cb:8e:16:ca:f8:0e:06:eb:c8:0f:bc:bb:3f:5d:85:32:fe:
d7:11:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:56:36 2025 by rpki-client