Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa
File: 8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa (raw, json)
Hash identifier: iLER7sEsz0jSZe7NCw5iMJbthgFa/l43atyKuPvWQVs=
Subject key identifier: AA:84:C5:4B:D3:0A:DD:27:67:B4:E6:6F:8D:2C:B4:75:C3:81:67:B5
Certificate issuer: /CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Certificate serial: 010D0C9F432858494B640F6E0AFE9C515089A400
Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 21709
IP address blocks: 2606:6400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0f:6e:0a:fe:9c:51:50:89:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=b5bc93f7-d999-4fce-b9c3-1696f0216b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:91:0b:21:30:9a:12:d7:cc:c8:f5:ad:7e:0a:
00:c5:7c:94:93:f4:db:1a:e7:11:52:58:3a:43:f2:
23:25:56:65:a1:66:69:f2:4e:c4:72:63:6c:7d:48:
10:4b:10:03:3b:87:c6:05:bb:ff:80:52:57:f3:02:
38:5c:7b:68:ae:15:cf:9c:29:62:77:b9:ba:e1:03:
89:60:54:dd:94:ac:99:9b:a3:da:50:64:fe:d9:e0:
16:bc:63:89:42:4a:e2:8a:a3:09:b6:1a:c1:e7:9b:
1c:c5:be:87:b2:a9:9c:e7:37:d5:28:78:a7:f4:4e:
d4:13:f6:b8:b2:49:2f:0a:dd:2e:88:dc:39:3a:cb:
d2:00:f6:01:68:72:9a:5a:6e:71:bf:a6:a7:54:f9:
4d:9c:57:96:64:ae:b7:3d:50:3c:19:32:60:62:5e:
77:04:68:88:e4:30:e0:fb:a9:fd:60:e0:63:23:cb:
21:c0:8d:3a:fa:e9:5e:55:64:9d:42:83:1f:b4:e7:
28:7b:34:73:17:fd:b4:c6:48:47:a2:93:23:62:61:
09:21:a5:8c:1a:56:41:76:fb:ab:3b:91:64:ed:03:
fa:91:4d:07:84:88:e8:c6:36:58:c8:0f:f6:40:00:
6a:15:d0:96:f5:75:18:f4:14:03:3e:9b:83:ff:df:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:C5:4B:D3:0A:DD:27:67:B4:E6:6F:8D:2C:B4:75:C3:81:67:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl
X509v3 Authority Key Identifier:
keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:6400::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:1a:6d:fa:4f:0e:1c:b9:97:79:f6:0a:94:a2:30:22:7f:5c:
5b:3e:b0:0a:62:f7:ae:34:21:be:86:12:50:de:a0:af:05:67:
45:b7:f2:dd:3e:d1:c4:a0:8a:59:39:0e:f1:fb:fb:1c:25:69:
54:53:56:e5:f0:0c:0e:65:6a:6e:4e:b8:66:d5:24:d1:01:c2:
f3:94:5c:a3:1a:c1:f2:9b:63:ae:d6:2a:d9:83:d5:f8:71:19:
0a:cd:13:92:36:1f:1f:e8:3a:1b:9e:fc:1a:b7:de:17:f8:26:
c9:82:69:ac:57:b1:13:22:7a:c5:f7:51:b8:0f:e2:23:f3:9d:
c5:b9:b6:8a:9d:63:3e:be:b5:25:10:de:3a:5c:15:46:e0:8b:
6e:bf:b7:a6:ae:e0:f1:81:6e:a5:25:a1:a2:7b:ff:c1:4f:fa:
d1:6a:d9:1e:a7:2f:71:7a:56:b5:43:af:f4:ff:b1:74:7f:bf:
ed:9f:16:d4:87:95:09:ff:74:65:06:41:95:c2:7d:15:b8:ce:
67:b4:63:e5:8c:d0:30:6a:7e:15:c0:8d:a9:16:66:fb:e4:b8:
71:f9:52:b0:33:7b:0c:cb:71:87:50:f5:4f:cb:71:b8:00:8b:
f5:a2:b7:a9:a9:c9:ae:2c:34:0c:22:06:d7:53:93:08:a4:00:
38:16:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:12 2025 by rpki-client