Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c4f2f77-ff14-3f22-be8f-57e79364f7c6.roa
File: 1c4f2f77-ff14-3f22-be8f-57e79364f7c6.roa (raw, json)
Hash identifier: 48NSQ0v6o0erAZBxrjk/2xvDiE7HTfPOsuERDpwOC7E=
Subject key identifier: 86:83:DD:7F:C4:47:F8:16:81:22:58:20:7D:F6:68:40:CC:7C:E6:A4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E4B2CBE7444537002480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c4f2f77-ff14-3f22-be8f-57e79364f7c6.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1009:d030::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e4:b2:cb:e7:44:45:37:00:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=a0139e86-00c1-477d-bc75-089489b2bd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:cd:34:8f:ea:22:12:80:d1:f7:42:af:b1:
2b:f5:c6:ee:97:ac:ec:28:66:04:66:79:f4:5b:18:
31:1c:fe:4a:ce:4b:f9:91:73:5d:ff:ff:e6:43:d7:
a1:57:80:36:51:44:b8:ff:e0:2f:98:a1:7d:93:c0:
f7:8e:0a:fd:fe:39:bd:8c:d0:1a:af:b1:b8:77:12:
13:43:a2:9d:4e:1d:5a:d2:17:69:e9:7f:d2:db:e0:
6e:91:26:00:da:d4:62:a7:06:3b:39:d3:8d:08:b4:
b8:2f:59:65:a6:6a:37:dd:e7:d7:9d:42:93:61:fd:
e7:b6:a5:09:56:34:00:60:c3:f1:21:7b:0b:4c:53:
36:dd:bd:92:ed:c3:f0:c6:7c:e0:1f:7d:22:6a:e0:
0c:2a:66:32:8a:7b:be:f8:54:9b:96:e8:ac:43:29:
fb:12:f9:ce:56:6e:36:b3:aa:cb:2d:b8:ce:d2:34:
1d:43:37:68:95:e1:9a:ea:de:ad:72:1e:58:fd:c7:
e0:4e:63:84:69:ee:c1:9c:dd:5d:92:8e:0d:e5:97:
84:ab:54:88:b2:34:d7:61:7d:5c:04:90:7d:51:53:
06:37:d1:c4:c5:f5:16:15:50:d7:62:5d:a8:0c:2e:
40:2e:9b:c0:68:14:a1:f7:31:21:7c:1a:af:de:53:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:DD:7F:C4:47:F8:16:81:22:58:20:7D:F6:68:40:CC:7C:E6:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c4f2f77-ff14-3f22-be8f-57e79364f7c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1009:d030::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:2b:3e:9d:34:0f:6c:1d:97:6e:76:4c:d6:b4:6e:e4:77:f0:
38:24:2e:41:57:15:0a:5d:a0:79:78:af:15:5d:5f:6b:ca:b4:
63:d2:46:c5:12:f4:e0:6a:d8:04:7f:33:7e:b7:a6:d2:da:85:
b6:c1:24:0f:eb:6a:f5:79:e4:43:d5:a8:38:0b:b7:98:f5:d9:
df:77:ef:0f:33:05:f6:f8:5a:96:98:98:3b:a9:93:5c:24:cb:
bb:f4:d1:50:10:6c:85:76:b2:5b:98:5e:c4:64:67:c6:14:e0:
7b:43:31:e7:aa:5a:5d:cd:b8:6a:99:25:de:b5:b5:f5:b3:cf:
6e:5a:70:3d:19:29:81:b9:35:40:57:19:d0:04:d7:ef:80:25:
d5:ad:1b:7e:4c:2b:ee:2b:13:99:88:ce:96:36:d4:47:fc:59:
67:e3:43:0c:64:8e:00:53:6c:1c:4e:19:64:0f:96:19:43:b0:
2b:62:55:28:fc:5a:09:1a:30:20:01:84:cd:78:98:10:f8:63:
2c:8e:8d:0f:4f:4c:17:ed:14:6b:be:d6:c2:09:de:20:0f:84:
9c:36:a2:ce:0b:45:1b:4c:2d:49:b4:0a:2e:eb:ca:7b:ea:93:
10:fc:24:45:21:2d:e9:4a:ac:61:24:d3:91:b3:68:91:b8:03:
d7:e4:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:02 2025 by rpki-client