Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c710cd-45e2-32d5-9563-d0b26d6f9f30.roa
File: 59c710cd-45e2-32d5-9563-d0b26d6f9f30.roa (raw, json)
Hash identifier: YDzdUkPcAtfmBuIcMn+5YNeV/NCfcEsymoO2Tn8QqTQ=
Subject key identifier: AA:CB:47:BA:C7:C6:F1:6B:1B:95:30:1F:AE:D4:92:E0:76:14:AA:92
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848385E822FDF4B54860F763A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c710cd-45e2-32d5-9563-d0b26d6f9f30.roa
Signing time: Mon 16 Dec 2024 00:42:35 +0000
ROA not before: Mon 16 Dec 2024 00:42:35 +0000
ROA not after: Sat 15 Mar 2025 23:42:35 +0000
asID: 13335
IP address blocks: 2606:4700:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:5e:82:2f:df:4b:54:86:0f:76:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 00:42:35 2024 GMT
Not After : Mar 15 23:42:35 2025 GMT
Subject: CN=b1a09aa5-5663-41d8-a386-744b4c1cdd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:cc:63:46:6b:8e:46:a2:48:55:e9:ed:c3:
5e:0b:cb:68:2c:0c:70:ab:ec:dc:5f:a1:98:27:2d:
8a:13:7b:c7:69:23:92:b5:75:8d:9d:aa:1a:16:de:
eb:ad:a8:98:df:7c:1e:ad:c1:61:36:68:b7:6c:89:
52:e5:02:bf:58:39:2a:01:85:e0:dc:0f:91:a6:ac:
ef:4b:99:2d:d4:fd:f0:dc:6b:b2:b5:80:fc:1f:4e:
37:48:a7:15:bc:57:24:5f:2b:38:c8:78:5e:93:86:
33:fc:f1:c4:cc:8e:b4:61:ba:83:69:07:d2:d5:84:
03:1e:2a:43:9f:3c:b8:58:82:e2:d8:d9:41:2f:84:
8d:98:bf:fd:72:3f:f7:b4:2d:a8:8f:dd:72:93:26:
89:cf:e0:55:ca:45:52:32:53:67:61:91:2a:90:64:
1b:d7:d1:37:96:77:ad:23:55:bb:aa:a6:0f:6e:bd:
15:56:93:2e:a8:5c:4d:04:e5:6d:27:37:5a:eb:b9:
15:fb:55:6b:1d:8c:ba:1f:2d:7e:d5:04:91:6f:63:
b2:c2:94:8b:42:ac:a2:d9:2d:13:58:1c:42:22:ca:
de:23:9e:1e:91:29:11:8c:3f:87:e1:6f:48:ff:6d:
f0:3e:5d:85:c7:4c:a1:b1:37:7f:86:bd:bf:6e:da:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:47:BA:C7:C6:F1:6B:1B:95:30:1F:AE:D4:92:E0:76:14:AA:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c710cd-45e2-32d5-9563-d0b26d6f9f30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:102::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:04:8e:45:88:ec:c8:f8:37:e7:cf:6b:f4:d4:cb:2b:a7:c0:
65:07:f7:59:61:4d:21:cd:30:b8:a3:5d:d1:bf:a7:9f:cf:76:
35:6a:7a:24:fa:d2:a6:e1:2d:b5:39:28:43:6f:04:0b:6b:4a:
47:f2:fc:3c:cc:54:09:a1:42:6e:df:31:5f:ae:bf:54:7a:69:
14:f2:80:3c:2d:f8:00:ba:c4:43:88:b7:de:ba:bf:e1:75:b3:
40:24:c1:1a:03:c3:01:04:1e:c5:5b:b3:81:92:53:a3:59:fa:
ad:82:d4:46:c5:d5:7c:6c:03:2d:c7:e1:72:4a:6b:29:25:de:
13:43:f4:e9:eb:1c:61:84:67:b5:f6:0a:83:98:32:bb:5e:8c:
57:9c:68:c1:1a:32:72:0e:20:0f:b5:6e:55:33:01:d5:c3:bb:
9c:4f:0d:d5:6a:3d:2c:71:25:25:f1:b9:97:6c:f4:3e:74:ee:
3e:de:3c:ce:c5:ff:b7:0c:89:23:42:92:22:d0:37:e5:1f:1e:
09:22:2b:61:b1:da:bb:56:23:d4:00:fe:30:46:d6:c1:fb:d6:
e6:7c:0d:a0:60:63:cc:89:db:7b:4a:3f:7d:c1:4e:1b:f3:df:
5a:b7:0f:84:18:a1:f5:4a:66:a4:97:bf:d2:c7:15:4d:54:ed:
23:24:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:47 2025 by rpki-client