Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa
File: 68be3c50-4093-3e0b-aa1b-e8f06f849002.roa (raw, json)
Hash identifier: TcFT/3rpuXebmFJ4TXZbqQi3fmDZOP1O9anA5bjrWTE=
Subject key identifier: 88:90:65:B8:E4:2C:4D:91:75:26:F5:07:8D:D8:BB:EA:48:32:FF:00
Certificate issuer: /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Certificate serial: 010D0C9F432858481F6536BBFA43DA0A252D5800
Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 6649
IP address blocks: 2606:5240:bacb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:36:bb:fa:43:da:0a:25:2d:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=c3a45dec-9474-41e8-9b2a-3d9730e7e286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:c7:f4:0f:6c:9a:cd:3e:b6:7c:0d:d8:d7:
e4:36:f0:fb:33:e7:f2:d8:8e:ae:93:f1:2f:5d:de:
90:25:df:61:a5:51:06:4e:f6:46:61:78:eb:a0:02:
04:6a:07:a8:a3:9a:42:81:5f:ad:0c:41:d6:1e:42:
c0:e1:ee:1a:38:f5:1d:c2:a1:24:9f:05:51:46:d9:
ef:17:56:92:1d:7c:05:7d:66:f6:b9:a9:82:70:a4:
58:32:9a:9f:3b:dc:36:11:8b:47:6e:55:e9:3c:4f:
1c:df:b8:fd:57:36:13:a9:da:8e:d7:11:86:cb:77:
c9:f1:a6:51:70:36:3c:65:a4:33:25:a2:9b:75:7f:
c7:ee:27:68:72:fd:74:2d:52:eb:34:38:5d:6c:6b:
cb:d4:de:d1:42:55:d5:a4:bc:b8:4a:46:43:95:a2:
2d:8a:18:92:9a:1a:8c:bb:c1:a1:b9:16:40:ba:a0:
65:0d:aa:ba:7d:6d:fe:ab:45:37:c5:da:1d:01:38:
f2:dd:c1:07:fa:0e:5d:02:fd:8d:41:9f:5a:8d:26:
42:33:1e:e6:6b:c7:0b:56:6c:13:d2:5d:1e:21:7f:
4a:0a:52:00:65:b9:b2:87:fb:ee:3b:03:bd:2b:99:
a2:81:26:05:0a:f9:2e:99:f9:b8:50:09:ed:b2:50:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:65:B8:E4:2C:4D:91:75:26:F5:07:8D:D8:BB:EA:48:32:FF:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl
X509v3 Authority Key Identifier:
keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:5240:bacb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a3:12:15:e8:0c:30:1c:c3:97:1c:4f:0a:8c:0d:26:c5:73:
39:1b:5e:6e:6f:9e:98:54:81:85:0a:7a:a3:63:79:19:34:5c:
06:29:5c:1e:25:1d:d0:37:1b:33:04:9e:6f:3d:4b:70:be:8d:
6f:69:bc:5b:b2:65:3b:72:d5:e7:00:1e:9f:f6:36:dd:20:49:
12:b0:ae:52:54:93:08:bf:b1:15:e9:a8:31:1c:b9:25:90:7b:
2b:60:34:81:d6:b2:c0:98:d4:f3:e3:1d:2d:95:19:20:4a:f2:
fb:f8:7b:4a:8e:e7:8f:44:6b:6d:0c:71:96:67:ba:e9:dd:df:
65:49:fa:a5:64:7a:35:30:47:d9:e6:f9:0d:e9:e1:cb:89:82:
e4:53:9d:30:c5:21:31:2d:38:e4:58:62:4c:0c:57:a4:8d:d1:
2d:ec:8f:78:fe:7f:b8:15:4e:40:15:10:8e:5b:e8:b1:e6:55:
02:e8:98:a2:0a:52:24:a9:a6:f8:e9:7c:08:18:72:e1:8a:78:
cb:0f:00:8f:70:a3:ac:28:df:b8:b0:a9:ef:85:e0:ee:8d:49:
a2:a2:c9:94:1f:dd:52:da:44:9a:d3:ec:22:a0:d8:52:51:6d:
2f:ab:18:de:18:0a:c0:93:86:15:c1:6a:d5:00:21:7c:74:9a:
52:9b:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:34:06 2025 by rpki-client