Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/243c83e1-4500-3202-a500-d0c90e43c5c0.roa
File: 243c83e1-4500-3202-a500-d0c90e43c5c0.roa (raw, json)
Hash identifier: nUJTy1relrXyLwsLvjn88DYgK4CNFYABqmWj8wE2rhA=
Subject key identifier: 12:9A:EF:4F:C9:E9:AB:BF:E8:F6:12:54:F1:ED:16:38:53:B3:ED:FF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400EAEAF25F82EC6F894F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/243c83e1-4500-3202-a500-d0c90e43c5c0.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100c:f000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:ea:ea:f2:5f:82:ec:6f:89:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=1b1f76e1-6a57-42f7-b2d5-61f7aad48e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:6f:5a:68:97:f2:bc:4f:6d:b3:33:e2:23:
16:0b:b6:1a:85:0d:d8:6e:49:ef:a0:ae:6c:d8:4c:
f5:c3:7f:a4:1d:83:ea:e0:5d:fe:8a:e2:29:ef:f6:
73:7e:22:cf:d3:5a:f2:57:0a:d3:60:5a:ee:2d:d0:
85:3f:98:a0:1f:0b:88:67:2b:4b:26:2f:51:87:e6:
98:ac:5c:89:f4:be:6e:27:09:ad:79:ec:4f:93:40:
58:2c:04:67:2d:9b:d5:aa:f7:8a:be:5e:93:9f:97:
86:d9:ba:e2:f3:d6:c2:0c:2d:a2:a9:15:05:34:1a:
94:5f:2b:5f:22:45:57:c6:d5:1e:ce:2c:5c:30:1d:
19:ab:5c:3d:7b:3b:bb:91:f8:da:5d:73:52:73:f4:
70:ec:d6:76:b0:0d:f8:ec:50:e7:37:5c:21:0d:e9:
86:d2:15:08:ba:6e:12:44:2e:a8:4c:8e:6f:b2:01:
13:c8:ee:ac:47:7e:e1:f3:46:91:c7:2e:35:30:b4:
41:fd:bf:4f:eb:72:db:af:4a:c2:ab:90:d6:9c:e7:
5d:09:29:72:f8:f6:65:b8:b6:31:ef:68:c0:35:5e:
32:34:54:80:27:b6:49:64:16:f0:bd:66:39:cd:87:
2a:93:c5:99:8c:7d:8a:f6:f9:a7:ce:25:0b:25:ec:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9A:EF:4F:C9:E9:AB:BF:E8:F6:12:54:F1:ED:16:38:53:B3:ED:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/243c83e1-4500-3202-a500-d0c90e43c5c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100c:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:41:d6:d3:bc:a8:b3:ef:74:1e:48:51:3b:e0:f4:91:0f:73:
57:a7:cc:d6:13:c4:fc:2d:32:fc:98:89:b3:65:5f:ad:c1:76:
be:bb:19:f5:a0:10:89:84:b4:e2:c6:3d:e2:c2:f7:e8:35:5d:
f8:fc:90:95:13:fe:e8:63:40:46:5e:97:96:87:db:8d:69:21:
5b:a0:14:e2:e0:e4:86:06:b5:de:78:6f:4a:30:7b:2a:7f:aa:
2f:0f:03:b7:7f:6c:b9:45:49:44:d8:7f:7a:16:4a:84:36:ec:
84:4e:e6:a9:83:ad:b1:1a:a6:cc:7a:bf:c5:78:75:c8:92:9d:
e6:8f:be:cc:06:b6:59:2a:cc:33:e6:52:a8:70:bf:ea:de:bf:
25:af:27:44:3b:4b:15:29:1a:1e:3b:4c:78:54:62:52:ca:f6:
f2:67:6e:8e:b0:13:4a:1c:5d:50:30:99:94:4b:84:8b:a5:b0:
77:e1:9e:f8:03:6e:d8:1c:b7:0a:8b:01:95:3d:83:13:dd:1b:
11:ac:a9:01:e4:d2:a9:78:ec:02:e6:bb:e7:78:60:8c:2b:17:
c5:2a:a5:d6:79:bc:1f:12:cd:00:67:5d:a3:03:57:a8:d6:f6:
41:3c:f6:ae:23:f5:7a:28:63:27:ae:66:1e:86:4c:62:6b:08:
e8:91:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:11 2025 by rpki-client