Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/693410d3-f1e0-3fe5-b5be-a58d15d5dbfd.roa
File: 693410d3-f1e0-3fe5-b5be-a58d15d5dbfd.roa (raw, json)
Hash identifier: YA+zonntnd6+Q1yocmTWoNKNdMM3vE89Ce2mz4PCy+k=
Subject key identifier: FD:A4:63:E9:7F:31:3B:E9:CA:E0:84:0D:55:18:3F:B1:32:16:A5:3A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400EBA93A0A4DCD7451F780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/693410d3-f1e0-3fe5-b5be-a58d15d5dbfd.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100d:a100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:eb:a9:3a:0a:4d:cd:74:51:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=a1302057-e94e-4e0c-a315-0a900e5e4081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:7f:25:9d:9c:0c:2e:7b:8f:3e:c4:06:d6:
67:99:6e:5c:07:6b:65:3c:70:2e:2e:49:da:c7:53:
1e:01:48:7c:2e:ec:0a:20:c7:b2:d5:a1:31:2b:61:
bd:1f:d3:e2:7e:49:ea:60:70:f8:f6:04:7a:89:74:
6a:3b:10:5b:c4:0b:46:58:87:72:1d:65:d3:34:68:
f0:72:b9:32:d3:ee:06:c5:e1:d0:12:94:fb:8e:51:
0d:00:1a:8b:30:0c:db:4f:a2:61:8a:2d:22:59:1c:
b8:f8:44:c9:1f:62:d6:9b:ff:1b:7e:c6:8b:55:c9:
58:8d:0d:92:89:22:c7:1e:9b:4d:78:90:f9:00:54:
c6:ef:28:bc:1d:33:bc:82:53:4e:dd:3b:04:48:a7:
6f:23:65:a9:6d:52:b1:6c:6a:e6:00:00:d3:b8:9c:
33:24:df:70:54:f3:5b:00:d0:4a:0f:c7:98:2d:1a:
39:3e:aa:c1:f5:05:c1:30:4f:e0:cf:8b:6f:38:c7:
49:69:c3:81:30:ca:e4:9e:1f:e7:90:59:04:fb:90:
b0:fc:f4:de:73:f7:02:95:13:25:0a:e3:43:e3:82:
22:3f:6e:53:f4:26:56:af:a8:5e:86:88:68:f5:a7:
fd:3d:63:b9:fc:5e:46:e9:2e:ac:8f:f2:9b:83:1d:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A4:63:E9:7F:31:3B:E9:CA:E0:84:0D:55:18:3F:B1:32:16:A5:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/693410d3-f1e0-3fe5-b5be-a58d15d5dbfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100d:a100::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ec:48:37:ec:f3:41:eb:c8:db:d2:45:f0:b7:ae:1f:11:34:
25:cb:62:97:30:b7:23:e8:59:05:ac:ad:af:1f:c9:e0:2f:a3:
2f:c9:ea:16:33:0a:6d:e6:a8:91:5b:d7:ab:fd:cc:68:3f:e5:
41:e1:e0:a8:73:74:c1:1c:9f:90:1b:50:7b:01:a7:0c:fd:3d:
5a:ca:03:d9:9e:b5:ab:c7:96:0f:e9:85:c8:7c:9a:32:db:40:
50:7a:5c:a4:93:ab:3a:ae:96:34:cf:56:32:81:5c:8d:93:0c:
f9:e5:5e:69:f7:f5:2c:3b:45:7d:9c:35:c3:a9:fd:d2:09:3d:
6d:e2:89:8b:c1:f8:48:ac:fa:6c:59:15:eb:c8:c2:d1:21:be:
19:0f:b2:f3:f2:05:e4:51:16:47:ef:73:d8:c8:a1:f6:cb:1a:
e2:cc:8c:9f:63:ac:e0:57:69:ac:69:7a:0e:71:3e:f6:93:cf:
e0:c9:cf:a4:4e:40:70:49:24:5d:2f:2c:08:75:05:15:ea:b9:
aa:e7:fc:e0:5d:3c:6a:c6:20:36:3b:1d:3c:5b:a2:45:1a:90:
92:09:94:41:e6:1a:35:e1:d4:ac:cc:5b:26:15:8f:91:b3:d6:
bd:3f:2b:a5:98:89:75:64:d5:39:2f:82:43:cd:48:d2:7d:4c:
9c:86:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:29:01 2025 by rpki-client