Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e1a79a-0d03-3dcf-ab0c-f481f9dd4345.roa
File: d9e1a79a-0d03-3dcf-ab0c-f481f9dd4345.roa (raw, json)
Hash identifier: +qAPb7M3l1DOuatOzfWZec1gFTFLX2Ma/QpvCJh4zIc=
Subject key identifier: DF:6F:C0:76:4C:A6:CC:D2:8D:D5:61:84:C0:C3:8F:2E:60:41:CE:28
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400D2293424B5E8B98F1940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e1a79a-0d03-3dcf-ab0c-f481f9dd4345.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100e:b0ec::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:d2:29:34:24:b5:e8:b9:8f:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=e70b6be6-c9fa-4ed0-a854-832f2e08c46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:86:9a:26:84:b6:fb:14:08:f2:a3:a9:c7:
28:07:e2:b8:ef:f8:2d:ad:ec:a5:cc:6c:59:3c:b1:
4f:2f:59:6c:6a:8c:b7:80:9c:06:f1:e4:ec:a1:df:
a6:b8:79:22:44:98:dc:01:ce:c4:b9:a8:bb:29:e6:
d6:aa:1d:c3:01:a7:97:c5:8f:33:c8:51:af:06:29:
13:e7:3f:ea:80:71:bf:75:d8:55:62:73:ed:4f:bd:
fa:56:e2:93:f3:08:4c:30:02:3c:98:d1:ef:0c:67:
0f:44:0e:44:a1:96:3d:9d:e9:fb:d5:b8:6a:cb:51:
0d:56:d0:ec:37:ed:b5:68:84:77:bb:31:5f:8a:30:
3a:72:81:aa:c8:11:32:2d:5c:1f:c4:0e:c1:9e:53:
e0:41:69:50:e7:68:32:3b:34:b7:27:22:54:62:e0:
5e:fc:98:0b:66:cd:61:5c:75:95:45:6f:bd:4b:3c:
2f:20:e4:99:a4:75:0d:b3:73:2d:c7:f2:98:72:f7:
55:5e:e7:0a:6b:79:8c:f8:bb:2a:6b:61:1a:80:14:
8c:2a:d8:cc:3e:50:83:d7:2a:4d:6c:7e:44:56:08:
9c:8f:1b:91:ad:d0:b0:fe:ce:83:85:7e:e0:32:87:
14:4c:ac:fb:b3:f0:53:5c:34:34:9c:43:10:5c:89:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6F:C0:76:4C:A6:CC:D2:8D:D5:61:84:C0:C3:8F:2E:60:41:CE:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e1a79a-0d03-3dcf-ab0c-f481f9dd4345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100e:b0ec::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:1f:7d:80:c3:32:aa:d6:02:fc:8a:84:e5:7e:5b:6c:9f:f5:
9d:1c:67:a2:4f:57:ee:44:a3:e2:f2:60:f8:7b:16:e7:64:14:
48:f0:57:85:cb:41:b5:7f:13:4c:15:04:8c:6a:a9:fa:97:ed:
2a:41:12:ca:22:91:0f:4f:ef:10:cb:c7:0b:7e:27:ca:5d:81:
cc:ee:9b:09:a9:7f:46:c3:1e:e1:76:87:78:c3:70:ee:a2:50:
77:71:04:3a:4c:94:18:3f:f7:bc:a9:50:79:14:87:6d:2e:7c:
b2:da:7f:68:fe:81:2b:0d:d2:06:82:d8:92:86:34:48:53:37:
1d:58:4f:48:17:27:9d:70:a7:c5:9d:78:9e:a9:06:14:08:f5:
77:a8:e1:cc:ea:7b:a4:4d:1e:25:42:ed:fa:ed:81:8d:ce:be:
0c:81:4e:bc:ce:9e:17:71:58:75:aa:4c:e8:ca:d0:27:21:a1:
e5:49:98:93:89:c4:8f:fa:ba:cb:ca:48:5d:00:3e:f5:2e:1e:
2f:7a:6e:68:84:53:56:bc:00:71:97:09:0d:7d:34:b8:59:95:
74:25:60:83:ef:e7:5e:10:24:0d:58:72:39:58:75:ab:01:89:
4e:99:3d:e2:f4:93:7a:97:ae:9f:1b:1d:fe:73:37:33:67:52:
ec:20:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:38 2025 by rpki-client