Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c513c8b1-06f7-3fae-891c-b916012baa70.roa
File: c513c8b1-06f7-3fae-891c-b916012baa70.roa (raw, json)
Hash identifier: J5hfTrmmvjvFJ2JnXmbd1UfgR8dkaXqua+fcqQJLAFA=
Subject key identifier: 70:E3:2C:0D:59:0F:3B:CF:A0:42:75:71:86:DB:51:FF:5A:12:73:23
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FEAA5FBE90066F91ADD640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c513c8b1-06f7-3fae-891c-b916012baa70.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1015:a120::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:aa:5f:be:90:06:6f:91:ad:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=5e63f1d2-520b-4bb5-9b66-69ea77c4ce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:24:76:f7:ba:fe:6e:4a:09:08:ae:46:81:
34:ea:36:8a:20:e7:21:cc:50:9f:6c:03:06:4a:4b:
88:04:63:1c:55:80:c5:aa:71:e6:7e:a4:aa:65:a9:
ba:73:ff:0d:bf:4b:67:07:2b:57:7d:b3:0a:78:4e:
4a:ff:64:01:35:a7:82:b0:fd:8c:55:7e:54:c7:48:
33:d1:b0:78:5f:1c:fa:d7:5b:3c:5b:7c:be:25:d7:
ed:d4:dc:55:38:8b:05:3b:f7:f4:4a:02:1e:dd:f3:
bd:29:ff:d0:58:df:82:6f:da:8b:49:7e:6b:bf:ce:
9c:43:90:ff:20:71:3e:12:c7:40:37:bd:80:4d:75:
07:d3:b3:c4:34:af:02:7e:14:25:4e:f7:06:52:c4:
2d:0c:a6:ab:3d:61:5c:37:d1:91:08:7b:38:c0:f4:
1b:f3:9f:86:d9:0f:08:c3:b6:63:42:15:65:88:fc:
bc:f5:c7:35:e0:15:c6:ec:78:e9:ba:64:32:8e:21:
cf:0b:c9:81:38:4d:8b:68:14:ec:17:4c:bd:dc:4f:
fe:45:52:90:a5:67:04:71:11:34:9c:3c:db:2b:1c:
d5:27:d2:54:41:c6:66:64:c9:4a:23:9f:4c:de:ff:
5d:37:44:f6:2d:5f:67:56:39:63:8d:c4:6b:41:a3:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E3:2C:0D:59:0F:3B:CF:A0:42:75:71:86:DB:51:FF:5A:12:73:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c513c8b1-06f7-3fae-891c-b916012baa70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1015:a120::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:f7:1b:14:aa:0a:96:38:93:34:c9:cf:6b:a6:8e:05:c1:83:
ad:83:25:6d:e1:1f:76:62:67:84:6b:6d:92:85:40:eb:29:aa:
51:ab:9a:99:26:d4:eb:2f:51:1c:70:ac:e5:ae:82:bc:d2:f3:
f7:aa:7b:2e:34:d8:93:55:77:17:11:b8:1b:30:68:79:48:44:
61:20:e1:c8:93:dc:e0:a0:63:a2:b8:dd:90:3a:e6:40:ce:11:
eb:e3:69:68:13:a9:1b:ca:0b:b5:1c:29:f1:d1:92:26:73:1d:
42:ca:5b:e2:a9:0d:c1:17:0c:ed:29:0a:c7:ac:64:e3:e0:ff:
cd:58:3c:31:af:f3:e4:ab:03:3f:ac:48:39:d5:6f:84:7e:f0:
f6:9a:39:ec:f8:33:48:04:e2:28:cc:69:9b:fd:60:1d:fe:f2:
a5:18:c2:51:2d:74:19:a5:73:15:e8:b2:01:ee:cc:02:a9:96:
f6:f5:48:14:98:f6:e1:8f:72:f9:91:1a:50:9b:a3:9a:72:db:
35:90:48:73:5e:9d:c9:ab:4b:0e:00:0c:40:9e:48:5a:07:c5:
bf:4e:c3:37:d4:5a:65:a2:43:08:e8:fa:33:b0:54:c2:21:a5:
67:5e:dc:a0:c8:37:a4:ba:a3:ce:2f:e2:4e:7f:5f:23:17:b3:
af:0d:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:15:24 2025 by rpki-client