Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
File: 6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa (raw, json)
Hash identifier: 8BMdv05PAHjS7aswVePxum0nB5p0Wi+bqbqnNxkhIAk=
Subject key identifier: 1C:71:C9:D6:9A:CC:4C:51:09:1B:A6:F4:AF:D8:AF:B4:B4:5D:A9:CA
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F43285848F65BDC7875AE5DCECDF7EB80
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 12129
IP address blocks: 2607:f790::/32 maxlen: 32
2607:f790:e000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:dc:78:75:ae:5d:ce:cd:f7:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=dddc1845-929e-4543-b294-7e89980c3933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:ea:56:e9:25:77:94:18:b7:32:c2:31:6e:
7b:96:e3:ed:b9:9b:f2:e8:b9:77:49:49:f7:6f:ba:
c3:55:07:2d:32:75:f5:c6:a0:5a:af:64:49:2d:44:
0c:89:14:23:1b:89:4a:66:ba:05:db:79:1a:7d:d5:
00:2f:03:5d:90:d7:ad:d9:91:f4:da:0d:fe:70:f7:
b9:4f:8b:c6:d8:c6:93:e0:1c:d8:74:fc:57:23:08:
43:d6:f4:99:a3:e7:b7:0f:3b:02:e0:63:95:9c:6d:
25:d1:d5:72:e5:c1:21:a3:fd:c7:12:12:c0:a4:ed:
d0:ec:b2:0e:ad:90:98:c4:4d:72:1e:c8:16:3d:b2:
fc:27:03:0c:74:57:89:cb:38:06:56:e9:11:6a:e3:
a3:15:05:c5:be:43:59:27:4c:0d:92:a7:d6:c9:ed:
2d:1b:53:93:86:35:14:23:bb:b0:21:d8:54:8b:80:
34:9a:d9:b1:9a:a9:67:63:65:7b:88:a6:85:10:1b:
b1:91:0c:92:25:16:b7:6d:d4:bb:5f:0a:a7:e9:2d:
43:5e:99:fd:87:4a:4d:d8:3e:80:14:92:68:20:3b:
7e:43:b7:13:e8:7a:6b:c2:25:9e:10:7f:58:87:28:
ba:39:17:9b:35:6e:3c:1c:2b:75:ee:fa:9b:d2:52:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:C9:D6:9A:CC:4C:51:09:1B:A6:F4:AF:D8:AF:B4:B4:5D:A9:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f790::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:5a:af:eb:3e:88:71:a0:d7:05:06:c7:b4:fe:85:fe:45:27:
c7:d3:e3:48:cf:69:55:21:db:c4:d7:7f:73:5f:d5:bb:f9:20:
4a:79:96:92:01:3f:c6:ca:38:6d:c5:45:c6:b4:89:3c:83:4c:
e7:3b:3f:92:02:b9:dd:7c:a1:65:0a:32:ad:c3:b6:c9:6a:8a:
fc:2c:88:ce:c5:7d:8a:48:db:bc:bf:07:f8:2e:a7:dd:af:ca:
cf:8b:de:bd:bf:fd:9a:70:69:c8:27:1b:83:68:f2:cc:1d:b8:
dc:77:8f:e2:86:90:de:90:28:bb:59:22:3e:67:fb:d7:0a:17:
bb:0d:cf:18:fc:47:3c:76:e1:ac:f6:ae:ab:6d:64:c7:e1:29:
e3:9a:c7:72:e5:b4:4d:a6:e0:27:cd:98:65:6f:80:5a:f0:02:
29:3e:48:0e:38:7c:5c:1a:cc:b4:30:29:cb:aa:35:aa:39:09:
04:96:fa:9c:d3:5a:20:32:ba:f8:29:d1:83:2e:7c:e9:8c:1c:
bf:f7:27:6e:e5:79:67:e2:6e:42:89:c5:14:86:14:26:4e:eb:
21:83:7b:07:e5:2b:f8:d6:0c:a5:f6:39:08:bd:3b:a4:6f:65:
08:c3:75:c7:3b:3b:83:be:f5:9e:fa:90:6c:07:13:ef:91:77:
b6:c5:96:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:57 2025 by rpki-client