Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
File: 5e960e85-1abd-344d-89f3-a74eaa12b893.roa (raw, json)
Hash identifier: qkVvv2hmgm4omTN1H8murbtaNCAPY8kBoyuzcLNvswQ=
Subject key identifier: 4C:2E:06:FC:6A:85:75:5B:F9:A6:7C:73:9C:05:BD:74:1A:D2:48:FB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400CD609D79330DDE016800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100d:b1c0::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:cd:60:9d:79:33:0d:de:01:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=770c5b34-bb19-499a-a7e8-7218a4283737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:d7:3d:35:db:73:71:3e:2b:16:f0:fd:88:
9c:e4:ba:bd:7c:6e:6c:de:c2:1f:54:0c:a1:6e:6f:
88:6e:50:f1:6b:a7:a5:a3:c2:ea:50:25:65:0e:4e:
98:ee:1f:a5:24:75:7b:5f:23:84:11:fc:f2:62:28:
35:6d:9a:97:a3:01:5e:e1:dd:3a:6c:c9:bb:79:cb:
ba:5f:bd:85:c4:2d:c5:af:97:e5:9e:90:06:f7:e8:
06:bd:7d:d8:4d:86:28:e8:19:69:3c:82:8c:b2:b6:
a7:50:38:ee:8e:0b:ab:95:3c:12:f0:f8:77:df:eb:
b7:18:9b:56:06:a9:bb:73:1f:4c:f4:59:07:f0:81:
4a:e0:2f:1f:7c:e5:bc:d4:86:75:f2:73:49:d1:63:
3f:f2:4d:1e:e3:17:c2:71:b0:51:35:8c:5b:fa:5f:
3c:9b:14:fe:87:80:cc:41:f5:ac:16:2f:32:ab:5f:
d9:c7:fb:49:05:a6:29:c9:e4:df:79:b2:88:b8:61:
54:85:25:bb:fa:fe:54:70:7b:07:d1:0b:9d:55:23:
08:21:76:a3:70:4a:25:f3:c5:c3:59:56:de:90:11:
5a:e5:89:1b:34:11:2c:7e:ed:23:a8:47:7c:d9:9f:
f5:87:e6:57:94:a9:1b:c2:27:84:5d:15:c4:b6:7b:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2E:06:FC:6A:85:75:5B:F9:A6:7C:73:9C:05:BD:74:1A:D2:48:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100d:b1c0::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:90:8f:dc:7e:7d:a7:30:40:46:ba:ef:a5:dd:20:9b:c5:a8:
46:e4:61:42:6f:1c:74:3e:55:58:63:82:a9:1f:de:88:65:d4:
a6:28:8c:d9:0f:a1:81:13:73:cc:ad:f8:d8:a1:bb:8f:44:68:
0e:79:fd:00:bd:88:eb:5a:81:4b:2d:04:b1:39:30:fe:5a:87:
1e:d3:72:45:48:2a:ae:1c:ee:c5:69:f0:d6:9f:0f:81:a4:91:
bc:ab:10:db:c8:88:bd:f2:e4:38:38:ab:0e:fe:b6:a4:51:6f:
5c:d2:b3:53:53:5d:5c:7f:10:34:ee:a3:d0:c1:3d:5f:48:04:
96:d8:f3:e0:7c:3f:57:88:f6:75:8f:80:e3:c7:56:97:aa:fe:
bb:09:f5:8e:89:51:22:f2:eb:41:00:e1:8e:78:8b:68:38:eb:
87:1b:f1:f6:35:90:a3:18:61:c7:41:d5:56:60:87:31:52:4d:
c9:27:48:e8:60:42:11:84:65:7e:6c:8d:8e:af:ba:2e:68:8d:
68:38:eb:1d:d3:ce:cb:df:f7:df:3d:17:03:08:6b:c7:f0:1f:
a1:c0:a3:53:90:34:66:9a:58:69:13:2b:69:a4:93:4f:33:ef:
85:57:1e:b5:e4:86:ca:c5:6d:d6:64:77:d1:0f:21:f8:80:92:
d2:a2:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:58:37 2025 by rpki-client