Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
File: a2086c90-a19e-34c2-9f70-84be6d8812f7.roa (raw, json)
Hash identifier: Y3ryYSgeqplSpz4dYQqB26UiVTH3mRbHM1rj21eldzk=
Subject key identifier: 16:34:E5:3F:DB:53:3C:47:EA:08:CF:26:59:5F:53:47:DA:BB:DB:B8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E622DBA7851F929E7D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100a:b1c0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e6:22:db:a7:85:1f:92:9e:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=f732aa4a-3b67-4c22-92cf-b2646cac9afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a4:5e:7a:84:f0:15:9e:22:79:5a:53:de:6e:
9e:e4:cb:b6:a2:7a:1e:e9:61:84:09:d7:47:03:b4:
f6:23:d1:48:76:19:80:bc:84:7c:86:80:0f:6d:ec:
62:04:27:ca:5f:b2:42:18:bf:0e:c3:84:f9:04:59:
be:aa:ac:f6:da:71:f0:6e:74:08:c4:a9:08:a8:73:
8e:ce:de:58:62:b9:39:24:e9:46:99:9d:dc:87:4a:
e2:b2:b4:d8:53:2b:5a:26:73:4c:76:1f:92:0f:1f:
8e:09:d3:0d:90:5d:fb:3c:92:9d:62:c3:06:3e:c5:
cf:17:5f:af:7b:e9:61:20:e3:64:cd:f1:7a:71:66:
07:60:c0:08:65:6d:b5:00:33:55:99:f4:8c:d5:ad:
55:ca:7d:1e:43:ad:06:73:a7:1e:32:47:e1:d6:8c:
5f:9d:f0:3d:21:ce:d2:4f:9d:fb:80:e9:39:f0:18:
c4:4b:57:a8:fc:85:06:53:9c:76:24:91:46:08:9c:
fb:90:96:bd:8c:95:7b:7d:25:11:c9:4c:43:ae:fd:
57:cc:a9:5d:c5:39:88:31:23:c9:d5:6e:13:73:9d:
ca:71:5b:47:ab:58:71:82:8b:4b:a6:a1:ee:86:7e:
5c:49:46:1e:8b:5f:3c:99:67:2e:d0:57:f5:ea:bf:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:34:E5:3F:DB:53:3C:47:EA:08:CF:26:59:5F:53:47:DA:BB:DB:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100a:b1c0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:31:d5:ca:76:99:e9:10:87:4b:85:f6:66:59:e4:8f:19:54:
b3:67:bf:e6:ea:51:a2:2a:02:f7:ea:3a:dc:41:3d:82:53:2c:
d8:3a:91:17:5b:dc:ec:06:c8:51:0e:e5:97:5e:d6:08:7c:f4:
47:fe:5f:81:6c:a9:91:20:87:64:a8:8b:4d:66:d8:97:52:47:
7b:0a:bd:83:a1:f1:03:3d:49:c2:53:a1:bc:3c:16:fc:ba:02:
37:c2:09:44:83:db:34:bf:24:38:6f:14:22:4d:1c:3d:72:df:
bf:2f:16:e7:e7:8e:d0:1b:ca:5e:eb:51:58:9b:ef:c6:00:4f:
be:1c:35:31:dc:d4:c9:1c:49:da:8a:c9:ae:ed:49:d6:bd:e9:
c1:f5:5a:4e:df:bb:e4:88:54:93:dc:fd:1a:7f:aa:2a:98:b4:
c6:c7:48:ef:fa:8a:91:64:2f:c8:17:69:ab:cf:30:b0:e3:aa:
3c:5a:dc:31:0c:a1:36:fd:05:58:94:12:b2:d5:fb:84:c4:32:
f3:f4:70:4c:d4:bd:fc:da:4f:c6:9e:11:57:eb:ab:ec:51:e4:
7e:97:3f:a8:34:49:8b:49:89:3b:d2:5d:0c:f9:42:4a:84:cf:
c3:3e:3f:fa:3b:0d:27:79:2c:00:ae:03:ac:7a:92:52:8e:3c:
77:0b:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:08 2025 by rpki-client