Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/c357b8af-7e88-36f5-9aec-1a7f55b62599.roa
File: c357b8af-7e88-36f5-9aec-1a7f55b62599.roa (raw, json)
Hash identifier: pomuhmSNDkcVB/H3g7yOQA1/ECia+1FeAWW0sz3hZiA=
Subject key identifier: A8:8E:7E:AC:D6:37:DC:FD:9B:88:3E:8F:B2:64:F7:7B:02:70:13:4F
Certificate issuer: /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial: 010D0C9F43285848854B50064D4D2AD3741EC800
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/c357b8af-7e88-36f5-9aec-1a7f55b62599.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 22828
IP address blocks: 2601:9a00::/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:50:06:4d:4d:2a:d3:74:1e:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=4d911aef-5881-4786-aac3-421dc25f0f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:e5:46:72:d0:fb:20:26:e3:04:cc:68:ff:
e5:48:0b:f3:a0:37:ce:ac:8b:39:c1:f2:64:9a:4b:
7e:fc:fa:e6:6e:77:73:86:84:9e:58:12:5a:7c:51:
ac:86:7e:17:ee:ef:fa:8e:c7:30:1b:e9:f6:73:4b:
73:e5:da:46:d9:3c:b6:66:b7:5d:c2:0b:4f:22:29:
36:e3:99:b7:54:15:fc:d3:e5:cd:9d:07:70:20:d8:
54:49:20:a1:37:38:8a:65:cf:05:4b:e3:bb:d6:4f:
b5:47:c6:1e:fc:0c:9c:2f:fd:07:26:45:3d:94:65:
c5:3a:0b:20:f3:95:56:44:eb:34:be:53:f3:0f:4a:
a7:77:10:79:dd:16:1f:83:92:db:3f:2b:e0:1c:3a:
1b:ce:a0:41:68:ab:53:0d:80:a1:23:78:f7:4b:85:
88:76:47:43:b2:51:d5:fb:91:53:fd:31:aa:fd:e2:
73:f6:bf:4d:ea:7d:17:ea:6d:8a:0f:a8:82:c3:c2:
53:61:e8:d9:bf:5a:9a:cb:e7:28:58:a5:aa:3e:3e:
d5:28:b4:51:e1:9c:03:9a:56:ba:b6:68:2a:2c:f7:
fe:27:8e:4a:3d:6e:81:d0:04:a0:38:bb:ab:6f:f6:
64:cc:fc:a9:e5:00:01:14:bc:8b:48:13:7a:71:69:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8E:7E:AC:D6:37:DC:FD:9B:88:3E:8F:B2:64:F7:7B:02:70:13:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/c357b8af-7e88-36f5-9aec-1a7f55b62599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
X509v3 Authority Key Identifier:
keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:9a00::/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:7b:36:3a:a3:a0:75:f0:43:3a:b8:4e:e1:28:10:9e:91:4d:
d1:0a:4f:dc:bd:78:ce:99:e1:d1:cc:86:96:ae:67:75:ce:70:
4a:85:22:b5:2c:2a:a3:06:ee:b8:61:74:e8:c0:67:4d:a6:a5:
e8:62:99:78:58:8a:7c:60:e1:6d:f3:61:dc:2c:bd:4d:d3:2c:
1e:5f:99:5f:42:95:23:e8:65:35:e5:22:4e:65:22:56:ce:14:
0b:5a:af:cb:c0:2b:0e:0d:d7:04:d2:83:9f:12:d7:bc:75:bd:
8b:74:d9:ec:b1:81:4e:f7:de:fa:15:b9:f0:5c:4b:80:a8:cb:
f5:bf:1b:34:f5:a6:63:9f:f1:e8:56:69:df:45:ed:31:3e:95:
e3:7f:ad:02:85:8c:86:d7:4f:6d:e4:fd:0a:8f:cd:c7:d1:a1:
be:38:2d:b7:a8:41:e5:9e:2b:75:78:4f:27:57:77:4c:db:ee:
6c:75:31:3b:24:ad:8b:7a:91:eb:02:73:20:98:3e:23:c9:41:
36:32:7e:dc:63:0d:88:0c:e9:06:f9:64:3a:0f:f1:8d:76:4f:
46:1e:d6:d3:50:15:dd:12:62:a5:df:d1:44:45:44:f2:49:16:
f3:ca:37:14:a3:da:e0:81:8c:26:04:5e:9e:28:61:18:52:e8:
a7:7d:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:17:17 2025 by rpki-client