Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
File: 1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa (raw, json)
Hash identifier: AiaAizw3xSMHkprqU5CfgfI72FHi/l/jabNYgdk/Ub4=
Subject key identifier: E4:FC:77:2D:7B:5B:54:40:CE:8B:B5:8E:12:47:CF:FA:3B:E5:9E:A0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB3ED4D69BC04DAFDDE800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 2600:4041::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3e:d4:d6:9b:c0:4d:af:dd:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=64365aaf-df73-41ba-95e7-1debdded4133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:4e:09:e7:13:f5:3d:70:7e:ce:d0:4c:7d:
8c:c9:1f:dc:f8:a6:b1:e2:da:1d:15:65:82:41:f7:
fd:5b:93:b9:b2:02:35:22:c0:7e:22:95:b3:ee:5f:
a8:c2:cd:c1:a4:82:12:a9:ae:a6:e9:4d:07:ee:c0:
94:25:f3:29:8e:ca:74:03:d8:27:0e:3c:71:40:28:
7c:5f:bb:de:ea:f0:e0:06:88:f9:93:7e:fb:f7:14:
74:e8:b0:54:23:2e:77:7b:74:78:4b:24:d3:08:ab:
d7:41:24:e1:6c:62:0c:d5:7b:0c:7b:f7:e9:08:f3:
a6:93:95:6f:18:6f:c8:57:57:16:90:fa:b8:51:5b:
19:67:30:0a:c9:b1:22:fd:09:f9:45:d5:d5:bd:57:
19:54:c0:23:df:e5:00:67:df:6e:28:a4:d4:98:e2:
0b:a6:ec:da:e9:8f:c5:cc:34:dd:18:9d:30:9a:bd:
44:9d:88:af:44:fd:73:06:ea:c9:9c:c8:3b:c5:d0:
b1:4f:30:75:30:d0:10:dd:14:b0:c7:95:30:5d:bd:
9a:09:89:84:2e:52:76:83:da:c8:01:5a:32:f3:f0:
b6:86:92:46:76:40:6a:67:a4:72:fc:6f:79:2e:c2:
53:2c:9d:e5:19:8c:ea:44:5b:ad:17:23:64:7b:71:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:77:2D:7B:5B:54:40:CE:8B:B5:8E:12:47:CF:FA:3B:E5:9E:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:4041::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:41:cc:da:2b:8c:03:90:a5:70:7f:eb:d2:ad:3e:df:ef:c7:
50:49:12:11:2e:e3:2e:db:2a:71:3f:bd:ef:6f:94:87:fe:ab:
90:b1:9e:71:d0:76:98:5c:e5:96:3b:1f:69:4a:b4:3e:5c:94:
af:9c:d8:e0:3d:f7:0f:a5:28:80:2a:20:90:12:b7:a3:db:84:
bf:93:64:79:de:e4:1b:d0:64:c7:8b:31:83:53:8f:12:d5:94:
1f:d9:97:a4:ef:68:26:e6:4f:02:60:33:99:e4:15:99:9d:47:
b4:22:c3:ba:d1:e9:e8:2f:64:ac:67:ae:00:39:ef:45:db:f4:
da:14:33:c2:91:ea:ce:a8:ef:0d:a5:ee:73:cb:99:e6:22:2c:
6b:d8:7e:9d:49:a4:4f:d3:61:c7:e9:66:dd:0c:c6:d3:e3:27:
9a:32:c7:73:6a:98:5e:ef:74:e4:8e:98:8d:ed:7d:b8:b4:2f:
5d:75:7d:ca:a5:78:f7:91:31:e4:a2:ba:85:1d:1e:59:53:b1:
6a:84:85:76:26:3e:ff:dc:d5:14:2d:eb:fc:6a:bd:4d:f2:1c:
86:6f:94:6e:9b:f8:a8:21:7d:fd:3a:8c:52:ae:2e:d2:61:28:
64:cb:1a:57:4a:c6:34:74:e7:51:cc:3d:06:2a:8e:e2:ef:58:
82:32:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:25:26 2025 by rpki-client