Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/e150f5ec-c7f2-3856-9fc3-a266be16eedc.roa
File: e150f5ec-c7f2-3856-9fc3-a266be16eedc.roa (raw, json)
Hash identifier: ZhcJ6bMJPJOwfSqVM5NPtn2sW+xrJZSYDrA+LuviUYw=
Subject key identifier: 06:DA:82:AE:DF:B1:D0:7B:F8:AC:D1:93:FC:AF:55:9D:2B:D3:64:7D
Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Certificate serial: 010D0C9F432858488DAB49145FE163CC10B3FF00
Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/e150f5ec-c7f2-3856-9fc3-a266be16eedc.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 26506
IP address blocks: 2605:ba40:0:230::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:49:14:5f:e1:63:cc:10:b3:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=32d2408b-e640-4ac7-a209-5a2796d017d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:c7:c3:70:d1:ed:26:0c:c4:65:f6:9d:58:
7a:95:05:35:63:4c:2d:04:e1:e1:e6:bf:21:cf:25:
c3:a6:09:db:eb:6f:b5:82:96:ee:07:31:00:5b:47:
7a:9d:9c:f9:79:19:52:2a:f0:09:98:b1:33:14:6d:
82:78:6b:fe:1f:4d:c3:0d:ab:be:5e:50:f1:b3:33:
fa:d1:b1:6c:31:80:23:94:05:be:07:84:ef:34:82:
6c:b5:3e:e3:46:a3:11:ba:73:f4:cf:7a:93:2f:25:
73:c8:00:b8:00:29:38:36:30:21:9c:a8:2d:a4:4d:
38:8b:22:c8:63:c2:4c:50:fb:cc:86:a6:d0:f3:2b:
8f:03:2d:85:46:00:2b:a1:43:f1:49:e0:c3:35:f8:
1c:6b:8d:32:dd:e9:d7:81:72:14:e5:f2:b0:11:d9:
9e:3b:ae:6a:8e:bd:58:09:93:60:ed:a8:48:ef:35:
14:85:3f:54:23:f2:8b:62:05:4e:a3:b1:c0:93:cd:
32:80:dd:29:20:76:87:e7:16:eb:9a:f2:a4:f4:bd:
d3:25:15:f5:4f:0c:f0:b3:04:0d:98:7b:a8:24:4a:
55:a2:2e:0c:3b:74:88:d5:9c:b5:38:c1:fb:bf:79:
35:10:6f:77:bc:23:d8:92:ac:ff:2c:ce:b9:8c:7e:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:82:AE:DF:B1:D0:7B:F8:AC:D1:93:FC:AF:55:9D:2B:D3:64:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/e150f5ec-c7f2-3856-9fc3-a266be16eedc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl
X509v3 Authority Key Identifier:
keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ba40:0:230::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:7c:7c:8e:e3:8c:52:0a:14:eb:32:47:68:1b:4b:2d:ab:07:
51:29:57:97:cb:36:9c:ac:38:b9:3b:22:3e:79:a8:86:ba:7e:
0b:cc:86:5b:a5:ee:0c:9d:42:fc:dc:74:70:b2:61:9c:d5:86:
9f:2f:ee:bb:01:cc:8d:0e:d6:19:05:4a:0a:1b:dd:3d:cd:10:
59:5f:24:15:20:e4:de:d4:e8:69:6d:48:d6:13:04:c1:6e:5a:
f6:4c:31:85:5f:e5:26:2d:c6:82:10:be:be:60:ea:64:90:2d:
21:36:78:02:4e:4c:d5:0d:51:23:5f:d3:d2:a4:69:cd:c7:c5:
de:22:f5:d8:e2:31:50:a3:f4:b0:5c:25:3e:42:22:f2:4f:c4:
a0:c3:b7:25:99:ed:44:dd:50:d0:61:e5:c1:c6:ba:21:9c:51:
af:73:e9:2b:64:b6:32:79:50:6f:ae:c1:c0:43:ea:e8:b0:a3:
f9:0b:ed:39:a6:29:84:34:dd:e3:88:88:3e:8e:2a:aa:1c:bf:
00:a0:de:a6:2c:fc:1f:c8:b2:f5:8a:a7:a1:a7:2c:f4:7b:57:
f3:16:fe:15:69:bf:2c:e9:e6:56:8e:b5:c9:20:0f:72:6d:27:
8d:e9:56:36:ec:f9:f6:bb:57:54:7a:cb:b3:e1:ac:93:44:c0:
47:19:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:59:42 2025 by rpki-client