Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa4b57e-1992-375b-9dff-43664b6801a4.roa
File: 5aa4b57e-1992-375b-9dff-43664b6801a4.roa (raw, json)
Hash identifier: puGSQRX3scPWE4qUkTyQIjRHD2rq5AUPpDUHTcsQjLg=
Subject key identifier: FA:0A:71:E5:DB:E0:42:C6:20:2C:A4:9D:25:E0:D6:7B:97:F0:A4:AB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7BD864F5768D64D75100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa4b57e-1992-375b-9dff-43664b6801a4.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:b0e8::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7b:d8:64:f5:76:8d:64:d7:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=b6198c4b-e722-4809-869a-29bb5d00a84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:ff:33:00:1d:4f:c4:66:af:47:a9:47:ec:
7c:0c:84:a3:5a:6e:c0:ef:85:f5:2c:fd:ac:ef:30:
fa:97:5c:31:77:83:33:ba:fa:45:24:75:cf:1c:c0:
c6:e9:8f:f7:66:48:9c:34:17:aa:be:cb:1b:df:0e:
2a:76:00:59:f9:1c:e2:7d:8d:b6:5e:61:69:d7:18:
8f:63:04:d7:c8:77:99:5b:c2:dd:83:13:2a:1c:9d:
d8:36:ca:7d:ad:de:5e:ab:51:74:2d:dd:a9:bc:d6:
f4:44:c9:99:e5:7e:a1:5b:bc:db:72:60:4b:f6:3d:
06:00:0b:eb:ad:34:78:14:09:5a:2e:a7:43:eb:5a:
2b:7e:76:09:10:8c:ba:be:a8:ba:7d:47:a9:53:e1:
86:a1:15:5e:46:3a:cd:a4:3f:9a:41:bc:73:9f:7d:
b8:30:f1:a1:17:6e:ac:98:93:84:bb:28:9d:fe:c2:
a9:0b:55:21:c5:f7:f7:9a:9d:dc:11:04:51:15:6c:
3d:fd:d7:65:03:43:d4:b2:59:5e:80:02:6f:89:b4:
33:33:d3:7b:03:4b:8b:88:5d:24:f3:40:bf:e4:ff:
41:65:2f:5b:7b:9f:00:a6:28:cb:39:6d:94:5e:0f:
20:73:22:39:42:8f:ba:4b:62:37:a7:75:01:c1:e7:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:71:E5:DB:E0:42:C6:20:2C:A4:9D:25:E0:D6:7B:97:F0:A4:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa4b57e-1992-375b-9dff-43664b6801a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:b0e8::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:53:06:a1:fd:47:3d:cf:d6:49:31:bc:2a:76:47:f2:35:ff:
f5:82:c9:78:45:6d:2d:e8:31:b8:31:10:20:52:c0:b6:02:ce:
43:04:35:5e:7b:b6:3c:9d:e2:3f:de:07:a0:19:12:81:c6:70:
23:8b:2b:8c:e0:16:e3:1f:4d:66:7a:a9:8e:87:87:a7:ca:24:
c0:c5:9e:f5:47:5d:b3:c5:ad:92:d1:9d:c1:11:38:79:00:ae:
eb:51:22:9e:a4:6c:94:9c:8b:de:30:00:51:8e:d6:9f:04:bd:
4e:df:f0:7d:ca:87:39:bd:ae:96:cf:13:b0:2f:40:f8:c9:0b:
15:8a:31:a2:af:70:5b:8e:dc:11:71:16:ea:74:e0:b8:40:a9:
2b:b1:72:f9:3b:4d:dd:2e:95:e4:ad:a9:8e:83:68:d3:58:1f:
b7:c2:6c:52:07:52:c1:3d:1e:7c:7e:33:f3:91:a3:e7:0b:86:
63:3a:d1:c4:bb:82:8f:af:c4:78:d2:72:42:b1:3c:3a:c5:ac:
15:b4:51:93:25:50:3a:62:d5:52:b1:f2:33:1b:c3:6e:49:eb:
36:ad:60:fb:0b:23:28:3a:4a:f9:3a:d2:8c:e4:7f:eb:08:40:
19:aa:b8:69:5c:b1:8a:de:1e:80:ba:d7:65:a7:83:ca:29:66:
16:b8:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:46 2025 by rpki-client