Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a1bda0-ae43-3902-a0da-6d222007ab54.roa
File: 78a1bda0-ae43-3902-a0da-6d222007ab54.roa (raw, json)
Hash identifier: zLGc7LhAGH/quWSuFaWKDUJf+Utwkp+cSTia1qPlQco=
Subject key identifier: D2:44:B5:BF:AC:FB:68:99:99:21:57:84:AC:3C:08:47:39:2F:73:9B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7BA571B8FA30A3774D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a1bda0-ae43-3902-a0da-6d222007ab54.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:b0a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7b:a5:71:b8:fa:30:a3:77:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=3c3a8615-ac5d-4768-a0d9-8f69ecc0f488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:24:59:c2:b9:a0:99:18:48:61:a5:16:0c:
79:16:3c:ba:3c:0e:9e:9e:39:0e:95:39:11:35:c1:
44:c6:79:01:18:3d:9c:ff:dc:29:69:e5:07:60:6b:
f0:a5:72:9e:e3:69:15:93:e9:74:72:fe:32:41:36:
7d:08:7e:7e:f3:2f:fa:05:5f:5f:08:c9:c2:c4:43:
98:d0:7b:9c:5e:3d:43:89:37:dd:14:3e:52:53:f4:
c4:92:fb:fc:a7:ae:e5:32:9f:b8:2b:d5:5f:ee:29:
54:4c:ea:23:f6:10:f6:2d:c1:a4:7b:29:91:c5:c1:
ad:61:1b:0c:f2:6c:bc:64:41:83:93:3b:c3:7e:82:
bc:9d:cf:7c:d3:a9:2e:a9:4c:1e:b1:15:88:a1:5c:
f6:62:27:ce:80:a0:05:b5:b6:33:66:7f:1b:27:13:
0d:82:25:ff:da:39:25:11:89:b6:8a:14:98:c6:20:
f5:74:16:c5:c4:67:f0:0a:4c:66:33:45:16:70:61:
e8:bd:6c:09:1c:58:57:35:25:1c:9e:d3:5d:0f:eb:
fa:c2:b3:fd:0b:f4:ec:38:c1:b6:26:29:c4:b5:ee:
7b:14:cc:dc:af:47:bc:e0:4a:01:8c:1a:be:4d:cd:
6e:ed:47:0a:af:2d:8f:87:33:55:4e:2b:40:11:94:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:B5:BF:AC:FB:68:99:99:21:57:84:AC:3C:08:47:39:2F:73:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a1bda0-ae43-3902-a0da-6d222007ab54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:b0a0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:9a:79:1c:55:0c:a6:17:a9:ed:94:3c:4a:4d:28:4e:cf:3c:
2c:10:ac:3c:04:d9:47:7c:4d:ff:b1:6b:5c:92:e1:3e:89:6a:
60:4c:4b:c2:44:2c:50:8a:67:bb:51:31:a9:d5:60:58:70:21:
5d:ed:35:8d:eb:a0:cc:92:43:7d:c9:9e:f7:a0:c6:ed:55:99:
ae:f7:3a:01:5a:9b:25:63:a2:c6:a0:88:8e:f3:78:35:6e:16:
01:ca:36:0c:04:c7:d4:a9:e9:44:6d:ce:71:31:c7:68:7b:df:
ab:86:c3:7e:ea:cb:c9:8e:ac:45:b3:80:3b:78:7b:29:2e:f2:
5c:87:fa:e0:d1:6b:bd:c6:13:47:57:49:db:f7:94:a2:cd:1e:
fc:f7:b1:65:eb:25:4d:aa:72:54:e1:a3:14:bc:e0:e8:f1:8f:
a4:dd:3c:fb:8c:ab:fd:dc:75:1a:bb:bb:04:da:bd:73:83:44:
c2:8c:1b:b7:f1:d2:ae:98:83:2e:ce:59:b6:e0:e1:72:ec:2b:
48:d8:18:d1:84:85:c7:50:b3:16:9d:44:2d:43:c3:1d:7c:28:
a9:06:f3:ab:7a:fc:0c:6d:82:2c:64:93:d5:c6:c3:a9:57:3f:
2d:ee:1e:28:6d:ad:fb:6f:2c:01:5a:e0:a7:0e:76:7e:5e:5b:
8e:86:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:45 2025 by rpki-client