Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa
File: f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa (raw, json)
Hash identifier: 5DJ3P0gtKPoiJwXlYXzr7813zLGDbom/DsDjiposOtQ=
Subject key identifier: ED:B9:76:07:D9:B2:CF:A6:86:45:D3:9E:0E:51:E8:CB:2D:92:8D:4F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400D81C8B8776A2F5C9D680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100f:b1d0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:d8:1c:8b:87:76:a2:f5:c9:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=7a55f8a1-9f2f-4fbf-9cc7-ce78bde58ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:65:02:60:28:53:90:4f:e3:8e:20:e7:60:
72:a1:d3:05:18:63:a2:0c:77:42:1f:4f:09:b9:9d:
3c:e1:1a:f1:57:05:40:ad:dd:2e:e0:f1:f3:be:ec:
5d:84:94:6b:f3:65:d0:9b:49:82:c6:2e:5f:69:ef:
87:65:e1:e0:7f:d0:68:1d:37:6b:df:86:e4:6d:5b:
4b:d9:00:30:07:12:77:59:e8:2d:37:6e:a8:bb:20:
1f:a1:f5:85:e9:07:db:5d:d3:f9:2a:39:1f:25:3f:
d3:6a:f8:cd:98:d2:95:97:ac:51:8e:de:f8:d1:73:
99:56:e4:12:d9:f6:0b:11:e6:b0:61:18:a5:0f:67:
7f:c4:61:a9:f6:51:17:f9:a9:8a:6b:4f:91:83:c1:
fe:5e:e0:f5:c2:d3:57:1f:ac:1b:1b:75:32:79:15:
5b:9d:5f:34:c9:34:85:16:4b:49:fd:14:bf:5d:95:
d2:5a:8e:5c:9d:5f:8f:9f:3a:31:22:6c:49:a8:2b:
e8:dd:7e:43:5f:f6:83:cf:7f:15:8a:45:42:d5:76:
1b:80:6a:e3:e0:2d:38:d9:40:fb:b4:3d:78:47:f5:
8b:e7:3d:a1:32:28:68:3c:da:19:5d:03:1c:90:50:
28:a9:ae:40:d0:d7:38:39:50:d7:85:97:f5:bf:31:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:76:07:D9:B2:CF:A6:86:45:D3:9E:0E:51:E8:CB:2D:92:8D:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100f:b1d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:74:29:0b:04:e5:e4:1d:46:e9:ac:a9:58:84:61:9f:2f:7b:
63:f4:f6:01:4b:80:e8:f6:50:91:b4:2c:65:1b:72:6f:f0:f8:
34:1a:a1:b9:86:67:ae:be:8b:e7:ab:74:42:2b:a7:cc:ac:c4:
ec:2c:3e:0c:fe:e7:30:f5:42:48:ab:f5:01:d4:62:a6:d1:46:
da:b1:6d:d8:07:35:ad:f9:1e:cc:cf:67:1c:84:c1:c0:02:d0:
21:cc:c9:be:95:9e:20:62:0d:4a:73:55:55:19:d3:db:b1:79:
7e:d7:58:de:97:03:02:7d:37:ef:cf:51:37:6f:6a:bb:a0:61:
79:6a:49:e8:fe:6a:b4:d7:f6:ed:ff:f2:bb:48:ec:93:26:ce:
c7:b8:c8:e0:7c:df:73:d5:9c:e0:41:50:cd:57:cb:73:c1:10:
cd:0f:4d:35:f0:30:5b:39:fb:5f:81:c4:60:2b:88:da:6b:40:
be:43:3a:eb:8a:6b:62:e5:7a:1f:b5:fc:83:69:af:72:d7:e5:
7f:5a:f9:09:49:40:84:ec:1b:06:c3:56:92:79:a4:5f:5c:5d:
e4:bc:75:96:24:2e:64:24:98:47:2d:39:f7:e0:c6:8a:57:3c:
b6:05:c9:16:45:80:d9:f1:1f:89:e2:f8:d9:72:73:81:ae:56:
f4:ac:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:22 2025 by rpki-client