Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70baba91-6bfb-3157-a5e7-d6c80bd7863a.roa
File: 70baba91-6bfb-3157-a5e7-d6c80bd7863a.roa (raw, json)
Hash identifier: sYgp9rGS2DADki4lVgQSDmS4gQBk1ktjJkYkq9LfuG8=
Subject key identifier: D0:EC:3D:97:3E:74:A0:BD:F7:7A:FC:D2:01:13:F3:34:11:03:DC:F1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E7F50FE42405B4688F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70baba91-6bfb-3157-a5e7-d6c80bd7863a.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100b:f000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e7:f5:0f:e4:24:05:b4:68:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=1a8d69ec-1d11-45a3-b415-28f0f2037c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:2b:78:f8:00:27:2a:a8:ca:6f:2d:13:8d:
b9:3d:dc:f7:ba:c5:18:4e:9d:ce:db:ae:d5:36:fd:
23:c3:74:2a:5d:ba:f0:2a:31:2c:75:55:2a:81:64:
96:64:b5:a2:6f:53:20:8c:0e:98:11:53:d3:36:2c:
46:33:02:56:21:5c:f2:37:fa:d2:7d:9d:24:5e:d8:
d2:b3:53:98:31:4a:1c:52:22:ff:d2:ca:1c:6d:68:
25:9c:9c:67:56:49:06:d8:a2:31:52:a8:c1:94:68:
b5:26:0b:79:0d:22:e1:84:95:42:47:52:92:46:e5:
e7:60:99:75:95:b1:fa:f4:c5:e1:00:af:45:38:0b:
c0:c8:32:73:55:ac:45:bc:da:ca:ae:3b:d7:d6:54:
aa:3d:a4:82:40:ed:d4:23:f2:7d:7c:3c:08:4e:ac:
8e:d1:ae:fe:76:a4:51:c0:8f:d9:7c:a0:39:f9:a3:
fc:30:a9:91:8b:f4:79:d7:5c:2d:8f:09:db:23:8d:
63:08:ee:0a:62:e2:22:ed:14:c0:08:1b:20:42:9d:
77:b8:7b:89:77:09:75:25:c8:85:39:86:71:2b:8b:
30:24:67:5a:be:0a:3e:98:c1:dc:b8:30:10:f3:00:
37:84:2d:30:7c:e8:cd:ec:ef:36:c8:a6:88:21:fa:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:3D:97:3E:74:A0:BD:F7:7A:FC:D2:01:13:F3:34:11:03:DC:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70baba91-6bfb-3157-a5e7-d6c80bd7863a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100b:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:da:48:6e:64:16:e9:a5:c7:31:3f:80:37:9d:a8:b3:55:de:
02:34:4e:48:f6:34:7a:73:91:b3:5d:54:26:1c:64:3c:2a:7f:
5a:73:d3:46:22:53:92:1f:de:ea:0a:84:f1:68:4d:45:5c:7f:
20:2b:1b:f0:4b:15:54:ce:81:4a:ab:9f:a3:43:cf:96:58:dd:
a7:84:9c:3b:63:26:16:87:d7:cf:24:e6:4c:63:96:62:be:b8:
20:8b:b6:9a:00:45:58:ce:69:36:b2:b9:0a:2e:bc:09:69:b5:
4d:fc:91:8d:8b:a9:ce:d2:79:7d:ac:74:ad:99:22:0f:a8:aa:
d0:c2:a5:2a:af:fb:ce:1e:e5:80:19:7a:35:bf:a7:71:c6:12:
38:c9:da:3e:fc:66:59:21:7e:b7:f8:b6:d0:3b:0e:52:6e:2d:
a6:2a:b4:a3:be:7a:40:41:cf:82:0a:5d:b3:d6:d6:8b:c2:41:
4b:20:4e:cf:0d:a7:b5:6c:6c:0a:18:b7:be:38:b7:1c:1d:aa:
35:b6:a8:1d:de:e5:e3:ab:d7:d5:d9:cc:8e:66:2e:39:88:7c:
8e:e5:2b:ab:9f:ef:bc:58:5f:7c:25:35:83:61:ca:80:01:ac:
34:46:49:f1:b3:88:f5:c6:81:8b:29:56:e8:06:8e:e1:d0:f2:
f6:36:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:33:57 2025 by rpki-client