Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa
File: f871407c-c2bc-3d6c-8715-048a48274b19.roa (raw, json)
Hash identifier: nL7diYOhZx9kYGDVVqQQwHrYS4AAzo4CZALMTT93ZDg=
Subject key identifier: 6D:91:1A:D0:A5:F3:18:55:88:32:64:77:23:73:AA:C5:6F:14:24:62
Certificate issuer: /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial: 010D0C9F43285848037B6D1E9FA4589FDB3D7F40
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 21693
IP address blocks: 2620:18b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6d:1e:9f:a4:58:9f:db:3d:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=c4e261a2-da19-406d-a008-b77f90fb211a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:88:cf:eb:3e:31:e8:5f:15:7a:a1:a5:fe:
68:ca:86:77:21:87:59:0d:07:79:08:9a:6d:72:55:
29:fc:25:b0:ea:5b:8a:e5:18:83:73:2f:cd:98:fd:
0e:88:31:0d:d1:f5:19:81:09:7a:31:cb:b9:fd:8d:
a6:ae:06:4a:b8:ac:d3:24:fa:60:86:79:d1:ca:87:
af:a1:57:50:8c:8e:70:88:9a:da:1d:15:2e:d7:38:
b2:8c:31:ad:28:91:18:ec:f1:ee:62:ff:47:89:7c:
fb:a5:8a:80:9c:97:c6:b2:43:97:63:62:73:b2:f9:
16:51:f5:64:d0:5c:cf:6d:f2:72:1b:b1:88:49:4b:
de:24:06:97:59:12:ae:43:2f:f4:4f:64:20:c1:f0:
e8:37:25:8d:37:e4:6b:7c:ec:fd:95:42:60:16:67:
95:cb:ae:95:ae:53:bd:a4:53:b3:42:7d:c8:81:f8:
40:b8:ff:97:a7:6d:90:cc:8e:f4:3b:a9:86:17:17:
93:7b:ec:bc:00:ef:69:0a:8e:ac:74:fe:03:29:52:
e2:50:c5:cd:9b:b8:da:3e:07:17:2c:04:8d:9b:99:
cd:3a:5d:81:83:80:60:2c:7e:94:de:dd:8b:75:bf:
4e:13:6b:96:00:7f:43:b4:c0:3e:b8:e3:85:2c:c6:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:1A:D0:A5:F3:18:55:88:32:64:77:23:73:AA:C5:6F:14:24:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
X509v3 Authority Key Identifier:
keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:18b::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:3b:15:e6:c6:a1:b1:fe:b0:52:6f:8c:70:95:af:8f:c8:34:
93:6e:cc:3e:27:36:b2:27:59:9a:a1:ef:7e:2e:75:55:63:4e:
1e:9a:99:7e:04:50:01:26:24:5c:17:d6:29:91:d7:43:64:91:
1b:ef:a4:04:97:9f:75:0b:a9:1c:1e:2c:f6:1c:84:e5:15:ad:
82:e9:27:d4:f9:8b:e5:e6:ca:7d:cf:f4:13:89:09:ab:e2:ed:
92:82:d2:7d:db:19:b1:e5:a4:17:db:54:4b:31:75:cc:cd:9c:
e2:a0:79:2e:0e:1a:c2:6b:a3:c0:43:78:1e:e3:ca:98:e0:dd:
d3:9d:e3:3b:3a:72:03:66:7a:38:3f:8f:5b:17:47:cc:ae:76:
ef:9f:3b:ff:f4:14:77:87:37:6c:d0:4c:51:44:d9:ba:1f:17:
94:bd:04:c6:74:58:14:24:38:57:38:4e:b0:a0:fa:35:74:e3:
9a:06:ed:c2:aa:8e:f8:c2:a5:fa:30:8b:b6:c8:cc:42:74:8f:
a8:ed:ea:9d:0f:7f:b9:6c:0f:3d:b8:d8:f8:99:5e:9c:9b:5b:
2a:e0:e2:1c:86:a5:47:d4:03:0f:0b:e7:70:89:22:47:98:35:
6a:2e:0d:04:29:80:8e:5a:2d:ef:91:21:f2:bd:70:1e:65:a1:
81:a2:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:05 2025 by rpki-client