Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d83cd249-8f40-366c-b833-e750711d9f02.roa
File: d83cd249-8f40-366c-b833-e750711d9f02.roa (raw, json)
Hash identifier: VhpzkK6FSfTO/rXE9Oy3clG8iKf33pJIs1mdnCiUsp8=
Subject key identifier: 50:B0:BD:68:5C:B2:97:0C:A9:31:D8:D4:4B:23:D1:FB:B9:4B:83:C8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483891B122FB20E3D8C3AD9540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d83cd249-8f40-366c-b833-e750711d9f02.roa
Signing time: Mon 16 Dec 2024 02:25:42 +0000
ROA not before: Mon 16 Dec 2024 02:25:42 +0000
ROA not after: Sun 16 Mar 2025 01:25:42 +0000
asID: 13335
IP address blocks: 2606:4700:311f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:91:b1:22:fb:20:e3:d8:c3:ad:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 02:25:42 2024 GMT
Not After : Mar 16 01:25:42 2025 GMT
Subject: CN=def7aff2-9467-4954-9972-007acea98d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:30:45:66:05:52:34:6c:31:cd:cb:a5:33:
fc:c0:07:6e:3f:74:24:1f:41:49:86:de:76:43:2e:
b0:81:74:f4:57:46:89:82:39:ec:10:2e:3a:80:90:
b1:60:27:13:d3:6e:4e:a8:ed:62:96:20:6a:46:b4:
c8:6c:46:f1:5e:64:59:88:ce:64:5f:a4:e6:0e:25:
b4:ce:ea:60:4a:36:85:fc:54:e1:d8:cb:99:f7:2f:
93:2d:e1:36:fb:5f:67:fa:01:d1:19:46:a0:ec:89:
28:fe:1a:33:96:ac:c5:c7:a1:35:13:be:cb:e8:70:
67:76:13:25:9d:e9:1e:71:55:52:59:41:25:cb:51:
3d:af:95:91:24:bb:4b:2f:37:29:eb:48:b7:02:89:
c3:45:dc:4d:28:54:9a:6e:45:72:87:4d:ac:35:d5:
e2:1d:cf:3a:88:31:c3:a7:b7:0a:33:63:dd:37:43:
0b:c8:24:c2:0c:2c:ea:9a:05:cb:ff:ab:c9:fe:d5:
b0:b9:a2:cf:9f:d5:78:1a:59:0c:1e:e0:f3:1d:47:
9e:d4:9c:5c:c9:ac:74:90:8e:d9:6f:86:ab:2f:30:
82:29:c4:7c:b3:98:83:6f:bd:38:4b:72:c6:4d:c1:
19:8f:bd:ba:fb:cb:b5:45:fb:13:57:1d:81:e8:55:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B0:BD:68:5C:B2:97:0C:A9:31:D8:D4:4B:23:D1:FB:B9:4B:83:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d83cd249-8f40-366c-b833-e750711d9f02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:311f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:20:d3:e9:28:32:64:58:00:0b:ca:db:21:ee:ce:85:95:30:
c3:3c:ff:f0:ec:de:d5:45:54:b2:39:0c:9d:f5:df:c5:cc:bb:
1c:cd:b0:da:de:e5:55:5c:39:a0:ef:9a:fc:90:5a:4e:9c:a3:
ce:c7:8c:f1:2c:cd:ff:01:48:1e:30:95:93:ac:08:88:3a:06:
ee:6d:87:6a:73:d4:e5:5b:cc:35:aa:aa:e8:7b:87:c5:4d:12:
23:8a:38:8d:43:68:b3:45:62:8d:83:9f:ef:21:a2:43:bb:be:
3f:3f:dd:99:67:6e:2f:95:ff:50:c3:20:f4:bb:fb:75:e2:a3:
ab:46:07:4c:88:ef:56:76:a6:59:d5:8f:0e:20:d1:b6:7d:1f:
3c:6b:7a:bc:f5:0a:06:0a:47:e1:8b:58:cf:9c:6a:18:e5:4f:
35:d9:fa:b8:6e:a7:4b:47:97:42:62:ff:35:fa:f4:ac:87:71:
be:e7:d4:6e:33:bb:a4:45:a4:b6:3a:07:a1:0f:54:fb:aa:20:
e4:3f:cc:c3:f4:9b:24:9e:9e:cb:a5:d8:dc:ec:82:df:6a:94:
b8:d3:ca:71:5e:c6:68:31:a1:95:a3:a0:1b:e8:b4:af:32:d8:
81:c2:28:66:60:7c:d9:b0:d3:8b:20:81:55:7f:b7:df:0b:de:
2f:0e:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:22 2025 by rpki-client