Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1f5cb7d-fbd1-33a6-821a-7ab0dfeb9049.roa
File: d1f5cb7d-fbd1-33a6-821a-7ab0dfeb9049.roa (raw, json)
Hash identifier: YmZVdTlBFNQ6ITisSnfvcX67IFjyRoBzLI0fNRizyBo=
Subject key identifier: 4C:D5:FD:7D:56:D6:CE:9C:14:BA:67:4A:FD:1A:AB:64:32:D6:BA:CA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C638058A8B1F9F5D964A2C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1f5cb7d-fbd1-33a6-821a-7ab0dfeb9049.roa
Signing time: Tue 04 Feb 2025 20:09:49 +0000
ROA not before: Tue 04 Feb 2025 20:09:49 +0000
ROA not after: Mon 05 May 2025 19:09:49 +0000
asID: 6167
IP address blocks: 2600:1001:a011::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:38:05:8a:8b:1f:9f:5d:96:4a:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 4 20:09:49 2025 GMT
Not After : May 5 19:09:49 2025 GMT
Subject: CN=c3461a51-7e55-4b96-9d49-9ea72a7addcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:55:53:bb:b5:82:49:f0:03:0f:f3:1f:52:
30:3a:92:ac:a2:37:fc:87:5d:fd:1a:79:ac:52:a6:
c4:fb:0a:2a:cf:bc:cb:7d:3b:d9:3f:35:bb:69:0b:
f2:99:32:85:65:8f:34:b9:e7:e7:46:e3:78:5f:a7:
6a:73:eb:66:f6:0c:a1:b1:26:f6:fd:5f:da:bb:f4:
95:67:a2:86:ae:c5:54:b1:8c:e3:e6:10:26:81:9b:
17:1b:d5:ee:bf:ad:d3:9e:83:e7:89:45:b5:cd:f5:
c6:83:e9:a0:45:eb:1c:0b:10:2a:70:03:7b:ed:53:
7f:d1:67:46:e2:e7:f4:06:e2:4f:8e:f7:db:24:8d:
8f:64:4e:d6:b6:25:41:09:72:2f:cc:51:96:52:65:
23:50:a4:e3:d2:2f:91:cf:cd:71:e5:a4:f5:d9:c5:
a2:8e:d5:8e:af:3f:70:7c:b3:1f:fb:ac:6f:66:40:
e1:03:7c:34:11:38:ec:c1:7d:40:86:c5:7a:e9:25:
bb:02:08:3b:27:9e:86:f5:07:e3:2f:38:f5:a1:9c:
26:93:54:78:33:06:8a:e9:cf:f4:2b:c8:83:5d:c1:
31:e1:39:22:a1:56:61:f1:b2:52:17:00:39:3e:27:
62:9c:98:a8:7f:6f:04:d1:82:f0:e4:d7:cf:27:b8:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D5:FD:7D:56:D6:CE:9C:14:BA:67:4A:FD:1A:AB:64:32:D6:BA:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1f5cb7d-fbd1-33a6-821a-7ab0dfeb9049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1001:a011::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:4c:66:a7:9d:ad:4f:1f:1d:6b:69:bb:f6:db:46:6c:63:74:
79:c4:11:c5:ed:c0:b0:55:9a:b8:38:b9:be:8f:16:ab:68:17:
95:0c:47:ff:a4:57:3a:22:1f:c4:9e:a1:1b:70:97:7c:f0:af:
b9:b0:d8:4a:00:ca:27:e1:40:57:4e:bc:7c:47:d3:41:ff:24:
b2:3c:de:d7:43:3b:75:c2:c5:83:26:23:fa:cd:89:d6:60:b1:
98:e7:de:fc:7f:0e:18:3f:18:9f:e0:e2:56:3c:2c:95:22:d1:
fd:88:18:10:c9:0c:25:59:64:32:75:a2:08:b6:1b:da:84:ab:
96:bb:a0:06:72:e7:2d:19:6f:a0:fd:28:6d:2a:e6:5a:40:39:
54:db:2d:b9:6d:45:26:82:37:33:d0:db:55:92:7b:1d:b0:8a:
92:f5:0a:56:4e:aa:b9:54:3d:25:3a:34:4a:bb:20:27:0e:84:
25:c8:8e:6e:ff:16:b9:40:62:9e:ba:73:3b:e2:98:35:7d:4c:
d6:bf:94:f1:ce:e5:88:32:32:f7:ba:6b:d1:78:62:10:d6:bf:
1f:da:f9:9e:7d:58:37:2d:0f:0e:22:a9:92:40:64:ec:06:a6:
db:f6:2e:25:e6:8e:ac:dd:d4:54:53:ff:b1:63:87:1a:9b:5f:
67:d4:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:43:29 2025 by rpki-client