Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/140f5b20-705e-3812-b1cd-3d918e20d311.roa
File: 140f5b20-705e-3812-b1cd-3d918e20d311.roa (raw, json)
Hash identifier: CjfnUuvhFrWcWPdG2jLT56FghUqgriq9Rbuj/00Ez+Q=
Subject key identifier: 61:2A:10:32:F0:F7:08:F3:70:7D:C1:51:93:4E:D9:B2:C4:1E:86:7E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB85C4A56DE5D68F77B5F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/140f5b20-705e-3812-b1cd-3d918e20d311.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:d020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:85:c4:a5:6d:e5:d6:8f:77:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=2deae25c-25fe-4e58-8087-8786d314810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:83:78:90:bb:dd:36:11:95:65:2b:e1:c3:
c3:b0:b5:a0:72:2c:a4:bb:e4:90:09:80:e3:92:1d:
d8:89:15:8a:c4:6c:9e:f5:f6:bf:6a:ab:0e:6b:0b:
77:63:97:09:f7:0a:5f:f3:1c:9e:1b:05:88:06:67:
87:e8:49:ae:5c:8b:d7:da:bc:af:69:c8:5a:0c:3b:
51:66:e0:f4:24:12:8a:47:c2:59:ac:81:b0:88:b7:
a6:77:e2:5f:61:64:9c:49:a7:28:06:64:76:93:f3:
63:77:f1:0c:83:d1:77:ba:79:63:1d:83:d0:53:a7:
42:30:e4:1e:aa:53:0a:fb:11:79:7d:75:33:0d:30:
b3:9f:85:53:4b:4d:0c:5b:d4:3d:54:fe:d3:9a:54:
c3:d5:00:84:c7:ff:d6:ac:70:1d:ba:3e:f3:62:c7:
51:8c:c2:f6:51:4f:5d:2d:28:ce:ab:4d:f9:31:ca:
2a:ce:a2:29:5d:b9:f2:8b:b6:da:9d:18:13:17:09:
83:5d:32:4a:eb:e8:df:01:90:c7:ff:6f:cb:a8:fb:
97:0a:e7:90:1f:25:b9:76:1c:46:2c:f1:98:f2:ea:
41:99:f9:33:a8:10:c9:66:e3:e3:d7:b0:e6:37:98:
87:78:71:c5:38:85:31:05:62:94:53:dd:0c:47:25:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:10:32:F0:F7:08:F3:70:7D:C1:51:93:4E:D9:B2:C4:1E:86:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/140f5b20-705e-3812-b1cd-3d918e20d311.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:d020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:0e:5b:20:04:53:d3:8b:16:eb:93:64:11:1a:6d:13:a0:d1:
35:0d:94:ee:61:38:4a:e4:ee:c3:af:d5:81:1c:86:df:59:59:
03:09:f6:14:06:b4:7c:d7:cf:eb:41:72:2e:07:ed:d1:be:ba:
30:e0:a4:52:8c:c5:33:ed:46:d8:f5:17:df:97:73:ae:73:e4:
43:d8:8c:58:07:ab:a2:c8:88:14:9b:86:ba:1a:68:67:4b:ac:
92:8a:e7:a2:47:05:86:b2:10:1d:48:7e:ca:3d:e1:60:f5:20:
97:88:9d:01:0b:b6:4b:eb:b5:1f:0e:c3:7b:92:d3:87:40:e3:
49:90:ff:6e:a8:d6:21:01:78:e4:b9:f5:0b:3d:5b:0a:eb:14:
81:aa:8d:d4:81:cd:21:81:75:b2:b5:cf:9c:57:14:61:fd:76:
58:60:79:74:0c:d2:d2:f6:ce:f8:c4:94:ac:ba:06:60:f7:b5:
50:cb:5e:cb:b6:8a:29:76:9b:3b:f6:25:e3:cf:0b:39:dd:44:
21:c4:05:ed:a3:48:38:12:00:77:04:f4:3e:f6:06:80:2e:68:
b2:19:21:4a:d0:f2:3b:11:f3:cf:15:61:7c:3a:c1:f8:6a:55:
df:86:9c:de:6b:6d:1f:da:7c:c0:14:29:35:e0:2c:c4:3a:d8:
ff:b1:3a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:53 2025 by rpki-client