Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ec40352-29ef-3428-924f-24761ba7db5f.roa
File: 8ec40352-29ef-3428-924f-24761ba7db5f.roa (raw, json)
Hash identifier: mZZ+Vf+XCTLuQOF8pf0YZPFnea53irNk1RFlH1dNmdk=
Subject key identifier: EB:7D:84:AB:D0:82:D7:49:73:96:C9:E5:6C:BE:FB:5A:6C:76:C5:DE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400CDA9CFB9AFCC19536D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ec40352-29ef-3428-924f-24761ba7db5f.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100d:b1c8::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:cd:a9:cf:b9:af:cc:19:53:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=cf5d4f14-822c-4087-bff1-5b32c52671ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:cf:ad:31:2f:8e:63:d0:ce:5a:90:ec:b6:
64:b8:a6:5e:15:97:c6:03:76:dc:b4:df:30:f8:e0:
5b:68:b0:b4:ed:07:b3:51:05:77:df:c6:dd:08:bd:
97:48:24:15:3b:02:e5:88:3e:e6:88:09:d4:26:33:
23:44:bb:4b:e5:ca:94:63:fe:e1:15:27:a9:f3:5e:
6f:e4:8a:2d:9e:d9:fa:cd:7f:a6:73:24:cc:c3:34:
64:f5:db:1f:c1:68:9c:d5:b8:3e:02:6e:8b:fd:ee:
8a:d6:37:fa:b0:68:1d:dc:9d:1a:79:ab:56:70:38:
37:cb:ca:bf:32:2d:06:e1:1b:d9:a7:9b:fd:95:dd:
b9:eb:96:d4:bb:4c:c7:6a:7f:a8:3a:ca:e1:21:0a:
20:8d:7c:9e:74:40:09:48:69:67:2d:44:19:16:91:
b5:2b:b1:7d:cd:a4:e7:a3:97:fa:61:61:33:79:29:
0d:75:76:99:10:13:dd:04:87:6e:e0:37:48:3b:6a:
c1:e1:71:34:cb:17:d0:b2:68:5b:f2:f8:db:f8:ca:
45:79:a3:93:48:f5:bb:f1:88:ff:e0:de:04:11:eb:
45:e5:32:2d:69:32:4e:38:a0:e7:ad:b9:0c:a9:2a:
bf:06:ab:7b:0e:d6:40:19:b0:61:4f:e2:8e:45:76:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7D:84:AB:D0:82:D7:49:73:96:C9:E5:6C:BE:FB:5A:6C:76:C5:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ec40352-29ef-3428-924f-24761ba7db5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100d:b1c8::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:8d:9c:94:d9:86:5d:80:6b:57:94:7c:bd:87:a4:ac:00:7a:
6f:9e:24:eb:be:ff:8c:e2:36:77:08:dc:b3:70:d4:07:90:b0:
36:8a:c8:37:b6:5d:e6:c9:2e:b1:3b:a6:c7:f8:45:b0:70:ea:
7c:91:06:95:1b:93:9d:4d:18:85:22:a3:a6:2f:47:59:89:66:
9b:3c:73:12:ab:99:64:6f:da:40:60:0f:f8:aa:cb:59:9b:27:
b2:a1:4d:bd:79:7a:a2:18:1e:c5:6b:c2:8e:d8:11:f9:f8:02:
4f:cf:b4:72:d2:e4:d8:18:4a:2c:3e:1f:ec:b2:9a:95:30:ac:
1f:91:2e:fb:81:9e:69:34:bc:37:45:13:7e:8d:78:93:be:be:
24:50:82:02:5f:86:20:52:54:39:4b:8f:0d:57:05:f7:a6:1e:
e3:1a:f4:a4:0a:70:29:6e:3c:6f:42:6c:ea:da:fc:97:98:4f:
4b:61:4c:cf:f6:56:08:90:22:14:0b:03:6a:3d:37:dc:66:f2:
60:40:4e:68:c8:38:29:88:42:9c:6d:1a:31:9d:02:5c:7d:9a:
f6:43:10:35:1e:c9:64:b3:c4:15:e4:8b:aa:86:8f:58:b4:f3:
72:66:80:74:25:ed:c2:52:c1:0b:2d:b7:60:65:ce:9d:6c:8b:
ea:e0:45:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:44:00 2025 by rpki-client