Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
File: a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa (raw, json)
Hash identifier: BLcHXL3+U4rWTNIhAD/lfxYGZOR2xuW7u+5OSBGYrbI=
Subject key identifier: 21:3D:73:04:F6:87:7C:7D:57:07:43:BB:6C:2D:7A:66:5C:F0:71:79
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB5348717FE5C9B3BE2C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1005:d130::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:53:48:71:7f:e5:c9:b3:be:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=70eb1067-fcda-4637-a231-dc7714969e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:66:ef:7c:67:4d:6f:75:3b:e1:be:9b:0c:
bf:b7:86:a9:54:83:ee:82:42:74:b2:4d:96:5b:0d:
06:ca:6c:1e:83:e0:c6:88:db:5d:8a:aa:40:8f:6e:
59:5f:5c:bc:50:5d:1d:ee:33:99:1d:52:ca:be:ac:
b1:8d:7a:67:51:f9:c6:36:4b:45:93:86:b8:be:f3:
05:db:9c:18:a8:56:a3:39:da:41:d9:34:c3:41:39:
95:49:cf:d3:d4:ba:25:11:de:9c:82:1a:c6:8b:ea:
72:85:75:af:6a:48:19:d4:fd:1c:89:b2:c1:10:09:
dc:ea:68:58:1e:dc:57:de:ae:11:4e:ec:6f:61:97:
c8:d9:fd:77:c4:31:5e:71:d5:21:36:83:3a:34:6d:
d1:bc:31:c5:30:09:d0:2a:e1:a1:97:ec:2c:26:ca:
1e:0f:e1:9c:68:d5:a2:a9:3c:e1:c8:b2:d8:90:e1:
bc:40:bf:33:4c:12:b5:fb:f4:dc:a1:4b:3d:1a:9e:
9d:70:eb:5c:e2:77:90:47:bd:23:22:6b:96:03:b3:
e9:ce:da:04:5d:51:79:9f:9d:cb:84:95:b3:25:a5:
2c:c9:37:5b:20:91:85:a4:ec:ca:cc:c0:6b:1a:54:
bd:a1:88:12:c1:ac:8f:01:38:66:04:3f:08:e4:87:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:73:04:F6:87:7C:7D:57:07:43:BB:6C:2D:7A:66:5C:F0:71:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1005:d130::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:90:75:f9:3f:b5:14:32:51:d8:4e:62:9a:0e:cb:5e:8e:2c:
66:ea:ec:6c:82:02:27:bb:67:03:00:3d:b1:6a:88:ec:71:25:
56:a9:74:31:f4:de:e8:75:8d:c6:1e:9e:0d:eb:f0:8d:64:df:
b6:41:ce:e1:4e:92:a3:1c:e7:27:41:f2:c5:9e:df:51:f5:cd:
1a:bb:94:13:2a:6a:78:09:d1:6d:c1:fb:dd:c9:0c:ee:00:f6:
8f:0e:35:01:16:4b:49:a6:dd:54:95:4b:8b:ba:8d:d4:81:3b:
bf:58:69:91:da:e3:6d:9a:14:cc:af:78:10:0c:7c:bd:5e:dd:
26:84:a8:21:70:c2:9f:6a:49:25:39:bb:81:24:91:a9:0c:e9:
5e:82:8d:83:d1:e7:08:9d:8d:c9:b4:90:a6:cd:a5:23:0e:a8:
91:70:80:e8:ad:77:fd:ed:e9:31:d0:ce:a8:1d:a6:f7:6e:09:
13:ec:ef:48:07:ba:4d:ec:56:f5:56:87:0f:b0:31:8c:b5:94:
1b:1d:7d:74:88:f9:ad:47:5b:3f:76:b4:d9:c8:8f:3a:d0:15:
4d:33:53:bf:b6:9f:57:fc:ad:db:26:e5:54:30:46:41:1b:9b:
9a:8c:e3:8d:49:ca:c5:2b:9d:3d:1e:0e:1f:ea:fb:65:8c:6d:
ff:7e:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:04 2025 by rpki-client