Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa
File: dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa (raw, json)
Hash identifier: hiL9pKT9/0L75/qt2oVEbSx+XOX4/NcmWuK09+0j5vo=
Subject key identifier: BB:AF:2F:F5:81:02:82:11:D0:AE:45:66:81:78:71:FC:88:14:EA:6F
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F43285847F2BA3166DA44D1389BA3C000
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 55195
IP address blocks: 2620:10a:80ef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:31:66:da:44:d1:38:9b:a3:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=1e8d4e2a-d87f-4736-8ee3-6144d7cc45e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:fc:90:db:dd:ce:72:1a:5f:d8:d5:b5:12:
05:f5:75:2b:1a:ba:91:4a:85:c1:4a:de:3b:7c:2d:
f0:49:27:80:92:98:a4:e2:1a:cf:f5:24:7c:8f:f1:
06:30:ae:88:ed:39:75:7a:d4:07:cd:cc:e4:79:2e:
0c:60:4c:10:9b:74:c8:a8:d9:3e:48:28:cf:ed:10:
d5:6b:1e:f8:88:af:4f:30:33:0e:e7:f1:80:58:0e:
fe:8b:04:e3:50:34:5b:21:7e:88:cb:91:bd:77:47:
f8:23:90:38:0d:48:72:c6:d5:01:ac:f1:84:e5:1a:
ee:9e:39:a2:c8:c5:19:3c:65:8a:e1:76:39:9c:94:
9e:fe:a2:c1:e1:f8:31:3f:cc:c9:c5:35:26:d4:21:
b5:b8:f9:a3:eb:ca:94:78:52:16:c9:94:7d:9c:80:
1c:71:08:7d:80:43:33:45:27:c0:39:85:c2:12:82:
7e:57:1e:5f:22:ff:43:1b:fb:6b:36:39:60:51:ad:
7d:36:0b:7f:e4:bf:0c:4c:65:f1:e5:8f:b3:63:97:
79:a6:4e:dd:a7:b0:86:d3:bc:0b:68:17:cd:b8:f8:
33:18:d8:6d:a6:d1:93:c4:59:34:27:b3:2b:79:9e:
04:80:42:1b:4f:26:28:0f:23:f4:c0:49:60:3f:4f:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AF:2F:F5:81:02:82:11:D0:AE:45:66:81:78:71:FC:88:14:EA:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:80ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:50:37:80:4b:33:86:69:d4:4e:f5:cb:d6:a8:4b:34:ea:58:
7e:d8:91:85:08:3d:1a:b4:37:f5:ae:20:3e:14:7b:89:95:6a:
1f:ab:09:ab:4d:30:83:27:0c:ba:68:d4:1a:f3:82:d9:49:44:
d6:06:f8:5f:37:0a:c1:fc:a5:12:c6:9d:64:bb:99:8b:ec:d8:
f6:39:a4:54:ae:e5:32:cb:ed:46:84:ca:30:b3:1f:4e:74:7e:
a9:2d:9c:56:be:93:d8:3a:55:87:be:40:74:a0:f7:70:e4:de:
29:77:65:f8:02:2b:e4:f5:7c:f4:fd:0c:c4:03:e9:d6:72:67:
24:9b:b8:1c:68:71:c6:bd:5a:4f:b9:3a:09:b3:b1:84:07:bf:
ec:bc:30:4c:14:04:6c:af:92:7d:29:a8:0d:7a:64:f0:6a:d0:
e0:16:f1:34:85:40:73:57:e9:33:f8:e6:84:d5:e1:c1:65:f3:
90:cd:f4:08:f8:3b:40:c0:0a:96:7d:09:62:7b:44:aa:44:a6:
fd:b7:33:dc:96:39:98:0f:2b:42:6d:27:7b:f9:62:de:9a:08:
b4:07:bd:d3:4f:be:9f:e6:dd:c7:46:a2:76:e3:c1:15:5b:22:
57:a8:9b:34:84:98:ab:9f:3e:dc:07:a4:d3:ad:7b:26:dd:10:
f5:6c:d7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:47 2025 by rpki-client