Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/522407e4-43f9-31c6-ab3e-5931f9e6a540.roa
File: 522407e4-43f9-31c6-ab3e-5931f9e6a540.roa (raw, json)
Hash identifier: mng2b1qdmFmJ+cIQ/p7x1+7fZD31cql3dxku82kETsI=
Subject key identifier: 1D:8C:4E:BB:6E:AE:48:16:1C:42:DB:B5:98:2D:E3:18:9E:0C:1B:7D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584838614CFA1700D699523A4300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/522407e4-43f9-31c6-ab3e-5931f9e6a540.roa
Signing time: Mon 16 Dec 2024 00:48:12 +0000
ROA not before: Mon 16 Dec 2024 00:48:12 +0000
ROA not after: Sat 15 Mar 2025 23:48:12 +0000
asID: 13335
IP address blocks: 2606:4700:3022::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:61:4c:fa:17:00:d6:99:52:3a:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 00:48:12 2024 GMT
Not After : Mar 15 23:48:12 2025 GMT
Subject: CN=69b21af1-8436-4497-83f5-8ee0fb926cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:40:05:0b:ff:6e:d4:b0:dc:c7:16:0f:a9:
4e:48:4f:db:21:d4:53:53:5b:91:c5:04:54:50:1c:
01:69:14:2f:3a:2c:d4:62:4b:cc:9c:ba:cd:1c:9c:
b0:c0:da:0c:6a:64:9f:20:27:f7:78:d4:e7:d9:eb:
00:1b:a0:4c:61:7e:77:24:ce:d0:b3:73:d3:53:e2:
f5:a1:0c:32:ed:aa:e4:b4:be:af:20:75:01:b3:7a:
79:f0:c8:2b:94:89:a0:88:2a:39:30:58:6d:90:0e:
32:12:8e:3d:70:92:86:7a:f7:92:0f:4b:24:ad:0e:
25:24:dc:89:3b:d7:e7:fb:7b:de:82:ea:25:39:ba:
58:d3:42:6c:93:63:ae:82:47:2c:ec:cc:31:3f:ee:
30:41:ad:03:62:c9:3d:32:18:f6:8a:c6:c3:91:fa:
7a:be:94:7c:66:61:d3:3b:6a:33:20:fc:ec:75:69:
84:dd:fc:2a:9d:57:97:28:99:d6:ee:b8:18:05:0d:
53:8b:3e:af:30:6f:bc:1d:9e:10:c9:a0:72:85:ee:
46:4d:1a:5a:5e:99:5c:40:8d:99:40:ba:18:6f:7f:
62:39:27:94:b2:e9:d7:86:25:54:17:1d:cb:85:a8:
96:96:0e:3c:c1:6a:48:8d:71:f8:d5:09:55:f6:94:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8C:4E:BB:6E:AE:48:16:1C:42:DB:B5:98:2D:E3:18:9E:0C:1B:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/522407e4-43f9-31c6-ab3e-5931f9e6a540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3022::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:f2:cb:d9:54:2d:fe:e0:d2:b5:2c:b7:d2:b4:38:35:54:b8:
d7:24:5a:74:91:40:3f:0c:52:68:bb:66:8c:50:43:27:8d:fb:
29:ab:c5:df:91:01:41:dc:cf:5d:81:32:6b:10:d5:4c:9e:3d:
38:3c:9a:ad:e5:b2:85:d9:62:19:ef:e8:f1:66:be:d0:35:dc:
03:f4:2e:84:63:ad:dc:6f:f3:da:7c:24:e4:3a:aa:96:4f:91:
7e:c1:87:5d:46:b3:19:8f:13:bc:dc:b5:eb:0c:59:1e:69:66:
ce:01:9d:64:ff:ff:36:71:8e:56:06:ba:55:9f:4f:86:ca:27:
6f:ad:85:5d:3d:84:24:e9:16:60:b8:21:3a:74:8c:0b:5d:6f:
bf:b5:3f:6b:5b:1e:f4:c7:7e:fe:4d:be:8f:d4:6a:f3:ba:06:
1b:96:9e:79:a4:04:a2:c3:65:2d:e4:b3:dc:b0:ee:80:bf:c3:
8d:8b:d3:ef:8d:f0:1d:66:01:f4:bb:7d:e1:81:73:5d:fe:36:
d5:8b:a2:85:1f:56:92:60:ae:44:59:96:77:68:32:0b:75:8e:
fc:38:42:a4:55:6d:0a:91:b0:85:c5:01:89:3c:06:24:2c:42:
32:a4:d1:b4:fe:96:9d:43:de:ff:a2:1a:16:23:c5:bd:05:4b:
88:11:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:28 2025 by rpki-client