Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c0ea628-f2c8-3df2-bc16-ce2a859c0abf.roa
File: 7c0ea628-f2c8-3df2-bc16-ce2a859c0abf.roa (raw, json)
Hash identifier: 3nEo1dEc16lr/G9NEa/B0Zt6bIq1LhyMcfp0PmHRIcM=
Subject key identifier: BE:A0:D2:D5:74:91:0C:A6:57:76:06:0E:7F:E9:8A:5E:F4:23:11:BA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848CF4638603D084DA151133580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c0ea628-f2c8-3df2-bc16-ce2a859c0abf.roa
Signing time: Sat 08 Feb 2025 02:00:38 +0000
ROA not before: Sat 08 Feb 2025 02:00:38 +0000
ROA not after: Fri 09 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1012:b220::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cf:46:38:60:3d:08:4d:a1:51:13:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 8 02:00:38 2025 GMT
Not After : May 9 01:00:38 2025 GMT
Subject: CN=49512776-cb2e-47fa-9dea-7bf69193980e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:d7:87:08:09:57:5a:ae:08:12:55:a6:50:
d6:19:c9:92:45:b3:ec:ca:65:1c:3f:5b:d3:63:b3:
4e:dd:03:71:6f:77:d1:22:64:b2:81:58:d1:11:7e:
38:69:52:8c:cb:c2:0a:70:8d:78:52:34:55:96:ad:
17:1f:cb:35:90:62:53:c3:4c:1d:62:51:2a:d8:2e:
ee:40:e7:11:06:aa:1b:2f:ef:6d:de:ac:3e:5b:aa:
ba:a7:7d:0f:ee:76:ac:b0:41:b8:02:d4:0e:b2:19:
40:be:5a:af:1e:5a:0c:5d:f4:d6:4a:56:45:c5:ea:
30:ed:96:37:a5:59:98:2b:4d:f1:86:2e:42:99:ad:
84:f4:48:93:10:ec:c1:e4:17:b3:d2:5a:ec:de:e5:
ed:f1:37:bc:c4:50:d3:c2:f5:46:3e:dc:7a:c1:ad:
63:42:70:88:56:0f:02:fa:09:70:aa:58:90:48:d4:
07:ea:43:6e:3d:74:49:7b:49:15:97:13:02:f0:74:
b5:12:a4:d5:93:3d:d0:76:70:de:c2:0d:7d:31:0e:
48:43:0c:8e:57:79:2d:36:5c:11:93:f7:48:05:30:
22:91:7d:f8:94:be:c0:dd:a0:13:e1:f8:9f:8c:c5:
fc:f6:72:4a:1f:82:eb:f7:0a:52:ce:9b:ab:73:d3:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:D2:D5:74:91:0C:A6:57:76:06:0E:7F:E9:8A:5E:F4:23:11:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c0ea628-f2c8-3df2-bc16-ce2a859c0abf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1012:b220::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:68:43:9c:bf:1c:48:23:91:64:43:29:e1:38:d6:4c:dc:6d:
4c:63:08:1b:ae:f3:d0:b8:69:c6:65:43:58:69:97:67:91:76:
96:60:2e:09:1b:df:f2:4b:8d:e0:bf:7f:cf:b7:54:76:0c:36:
22:1c:bc:a6:a0:9c:66:5b:73:f7:7f:0d:8c:1b:ba:b0:4b:fe:
2f:a6:01:08:b5:cd:b6:ba:68:27:fd:0d:94:3e:dc:e8:78:af:
36:1f:a1:9a:0b:09:df:41:73:1f:de:62:f7:9d:10:bb:6e:7f:
1f:96:cb:2b:ef:92:0c:27:52:f1:19:89:55:cd:80:34:3e:01:
a3:98:6d:d4:fa:b2:46:55:e5:05:8b:c1:82:e3:0b:84:30:22:
38:eb:d8:c9:28:21:99:de:b8:99:b4:7a:40:7f:5f:56:d6:09:
60:27:b7:78:8f:3b:94:32:74:98:f7:95:d1:ce:38:5b:a7:fa:
09:3c:61:3a:f7:28:7f:08:67:f3:eb:43:f9:f2:30:70:a0:27:
c1:60:4a:db:e7:88:33:69:43:01:a4:49:49:32:29:9d:eb:1f:
e2:7d:8d:f4:fb:96:23:8b:a0:1f:c4:76:3d:5f:4a:41:9d:e9:
47:9c:0a:5b:97:d3:e7:5d:cb:ed:a1:17:c3:23:e5:77:32:fa:
2f:f2:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:35 2025 by rpki-client