Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
File: 2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa (raw, json)
Hash identifier: FItfA9BfCHdOpE0Nnkbjp7UJTrJ21/KisBWRkFC+IEA=
Subject key identifier: CD:A1:C6:D3:EB:B6:43:5D:BB:8A:76:BA:C0:16:5D:79:C2:6C:35:73
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F43285848F3911C0C06AD8D7A9D8B2780
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
Signing time: Fri 21 Feb 2025 02:00:39 +0000
ROA not before: Fri 21 Feb 2025 02:00:39 +0000
ROA not after: Thu 22 May 2025 01:00:39 +0000
asID: 27281
IP address blocks: 2620:116:8083::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f3:91:1c:0c:06:ad:8d:7a:9d:8b:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Feb 21 02:00:39 2025 GMT
Not After : May 22 01:00:39 2025 GMT
Subject: CN=b0e819ba-3e5a-4075-bb25-db3d3295a2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:49:3f:2f:7e:67:a4:21:28:6e:e9:b7:34:b1:
ab:9f:3e:94:b1:af:f5:f6:9a:cf:61:c5:2a:4c:a1:
6c:4d:fa:88:73:ac:1f:ee:ac:ab:63:d8:f4:7b:30:
75:65:65:00:c7:16:11:21:08:fc:2a:27:2c:f7:a4:
18:0a:c7:ad:6a:35:57:d2:37:1c:d2:b2:60:d6:57:
17:73:99:e4:37:03:c7:6e:4c:06:a0:92:66:08:33:
7f:a1:ef:b6:ee:73:1b:ad:c8:76:b3:84:8c:c8:86:
5d:91:f3:77:4b:ee:57:58:67:ba:d4:86:51:3c:a7:
02:05:1e:5e:7d:c1:02:a0:08:d2:21:8f:ca:4d:53:
a8:ff:b6:2b:42:c4:cb:e4:53:db:8f:cd:8f:9b:61:
b8:34:db:cd:78:8e:1e:b7:25:46:44:4b:1c:81:e5:
1d:5b:ed:17:6b:64:c8:a0:8c:35:9c:4d:fe:16:1c:
6b:0d:c9:96:ec:d4:b3:01:52:bd:b7:87:85:17:f4:
56:54:96:d1:1f:1f:63:c3:43:ed:08:fe:43:e5:b0:
b0:40:92:3e:46:de:03:d8:8b:b1:f4:cd:00:c0:93:
7b:c7:4c:4c:51:9a:e5:b4:ca:e9:65:0d:54:32:3b:
59:2a:5d:0d:66:fc:e8:5d:5d:5c:97:21:14:ec:17:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:C6:D3:EB:B6:43:5D:BB:8A:76:BA:C0:16:5D:79:C2:6C:35:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:116:8083::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:14:f3:5d:96:c3:e4:85:c3:bf:70:b1:33:64:d1:1d:93:c6:
c1:5b:94:8a:f0:3f:c6:03:3c:4a:41:eb:44:41:e0:5c:86:fb:
19:4e:bf:61:01:cf:ff:64:92:48:ac:ef:3a:92:8f:3e:b1:c8:
38:23:15:c0:50:fe:7e:bb:15:a8:05:7a:98:e2:72:2d:b8:c9:
c9:6d:14:e9:94:5d:9c:07:b4:21:58:51:84:40:5b:fb:4b:9a:
ee:6a:26:e7:09:8d:11:da:4c:80:72:0c:ec:32:7c:a8:73:27:
6c:95:db:ff:a8:26:c7:7b:ef:59:ef:fd:14:6c:20:5e:11:f1:
6f:27:e4:c9:a5:59:fc:a4:11:3e:5d:ad:7d:ea:39:0b:fb:8a:
25:fa:d2:a3:8e:b0:a2:12:b3:b5:72:ee:90:9c:8d:5e:32:dc:
8c:57:a0:d5:01:d9:f2:c9:9a:8e:d6:4f:61:cc:96:6d:f2:76:
b2:41:51:25:75:77:20:0c:73:d8:a1:86:74:a1:f1:f3:66:cb:
ec:51:64:d4:c2:0d:62:91:f8:7d:2a:db:47:e2:6b:c6:e8:e6:
d1:cb:00:df:ea:a4:8c:4c:39:4d:ca:53:78:ad:e0:6b:f1:ae:
e3:39:91:a7:54:9c:ac:02:ce:46:b1:a0:85:57:1f:03:43:88:
f6:11:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:53 2025 by rpki-client