Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acdff5d2-ebaf-3f86-a0e7-7c997d64d890.roa
File: acdff5d2-ebaf-3f86-a0e7-7c997d64d890.roa (raw, json)
Hash identifier: vvaTHvP0iaPyGODK3md+i4d0r+8lbbgk+YIvvZcnuv0=
Subject key identifier: 71:83:F1:D3:C0:07:0F:13:DA:28:B4:65:78:A1:19:15:64:45:D1:41
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB83599332AFEC06075480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acdff5d2-ebaf-3f86-a0e7-7c997d64d890.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1004:b090::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:83:59:93:32:af:ec:06:07:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=9a3a22d5-96fe-4131-b8e7-c6775cbeacb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:96:b6:c1:04:34:90:d4:60:af:39:a3:94:
d5:89:6a:18:d3:3c:ac:e6:73:07:d7:c8:ba:20:75:
76:d9:bd:c9:0a:18:57:a3:ba:8e:18:e6:d0:8d:e8:
8f:0b:11:a6:90:bf:87:1b:73:bc:3f:e9:71:73:b3:
52:7b:56:4b:bf:7b:5a:4b:f4:64:71:5b:fe:fe:15:
8e:9e:76:b5:c6:7e:91:99:14:35:92:77:c2:19:f3:
f2:5d:58:b6:d4:3a:20:c9:9d:ea:0d:19:53:71:aa:
cb:04:11:7e:f9:4b:0a:e1:70:98:7e:7e:cc:3d:4d:
ba:5b:ce:d4:62:9c:bb:97:2c:c5:aa:db:44:5e:32:
75:a9:41:34:74:1a:d4:c7:75:cb:48:b2:71:1f:31:
e2:7e:ec:e3:90:9d:95:30:80:fa:fb:74:56:f7:d1:
50:09:0b:dc:1f:a9:53:ce:10:5e:92:43:41:e4:9f:
ee:40:bc:19:9f:8a:47:cd:ca:0b:6c:70:65:5b:a2:
4a:7f:8c:07:5d:93:15:ad:4f:0f:e9:f1:da:12:e3:
4c:ea:fe:eb:80:ad:51:be:2b:4f:7b:54:ac:ea:7f:
de:df:6b:27:d5:2c:06:82:f0:5b:db:aa:66:41:56:
da:88:d1:84:93:96:24:dc:ee:4c:33:d6:57:f0:f3:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:F1:D3:C0:07:0F:13:DA:28:B4:65:78:A1:19:15:64:45:D1:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acdff5d2-ebaf-3f86-a0e7-7c997d64d890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1004:b090::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:65:65:77:f2:f2:08:57:33:37:34:35:4d:dd:16:59:87:ee:
f5:cb:b0:95:b7:df:34:e3:53:db:36:a8:df:ef:91:28:ea:ab:
60:ee:8d:cc:9b:97:1f:61:ed:4d:10:96:03:39:4f:e6:74:f5:
c4:fc:4b:df:8d:25:42:0a:5f:ec:d9:12:b9:37:98:32:1e:71:
60:ff:aa:66:12:02:02:e0:69:43:6d:b7:3b:7e:6e:ac:c2:2a:
9a:61:71:9e:5f:1c:34:6a:13:49:50:73:90:09:13:ee:8c:a3:
cd:7f:9e:66:5e:29:da:6f:ac:dd:8a:79:43:bf:d8:4f:45:c6:
31:51:4c:da:62:ac:fd:bd:96:e6:e1:e9:a7:da:94:18:5e:47:
2d:8a:13:10:fd:4c:db:0a:41:1a:57:07:88:dd:dd:55:be:de:
12:a6:63:ec:56:8a:e7:ed:c8:f8:51:d0:23:f1:f3:38:8f:74:
01:1f:14:5c:da:1a:23:e1:5f:21:5c:26:56:e9:55:18:0e:f2:
95:fb:4e:24:dd:ae:18:14:7e:56:55:ab:99:83:0c:b9:97:7a:
24:e9:cc:6e:09:b4:97:60:f0:06:7a:65:76:7b:5f:7b:61:b3:
67:e4:7b:45:90:f6:56:b5:cf:23:31:b5:9b:58:32:7b:d0:a0:
45:b0:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:50 2025 by rpki-client