Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b1822b6-ad25-3e76-897c-a3789e059e27.roa
File: 1b1822b6-ad25-3e76-897c-a3789e059e27.roa (raw, json)
Hash identifier: HTRpAxSEI4qRnMa4SCqfODZdFV49XumJNnthgJd/Jus=
Subject key identifier: 70:23:A6:1C:13:C0:EA:32:31:C2:D0:94:E7:10:D3:0C:D1:0E:88:EB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A1362F16D9D41D72E7974B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b1822b6-ad25-3e76-897c-a3789e059e27.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:1408:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:2f:16:d9:d4:1d:72:e7:97:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=d4b6a48d-d9d4-47d1-bd12-b83cb6207fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:0b:0c:24:04:ee:65:f3:09:3e:51:4e:3f:
3b:f7:58:a1:97:f5:e9:88:a9:b0:95:36:ad:84:cf:
26:f2:9e:50:e6:10:7e:40:df:47:f9:bd:4f:2f:02:
8b:8b:9a:e0:fb:0d:cc:5d:24:a7:36:8a:76:23:a5:
4c:49:aa:6f:81:02:dd:5c:9d:36:73:ef:d2:bc:bc:
56:3c:ff:3c:44:0e:39:9e:54:6f:aa:54:b7:60:4c:
b6:8f:b2:d4:4a:a9:56:5a:6f:7e:8a:83:62:d4:00:
87:c7:a5:fc:76:6b:32:8a:08:40:ab:c4:42:4c:cc:
55:e1:d7:2d:ff:e6:ab:39:92:43:d9:39:ee:13:96:
8f:04:b5:8a:af:49:d3:d3:22:51:d6:11:69:18:ee:
33:3c:e8:e5:ba:2a:87:4f:30:5e:7e:47:0f:8d:9d:
a9:8b:c5:fe:72:7a:24:87:c5:db:7d:e1:8d:c9:0a:
84:c9:b6:27:ae:34:5a:02:bb:a9:50:5e:a5:a2:80:
d5:94:2f:9d:31:d2:71:4f:69:15:31:9e:16:01:c5:
f1:90:68:11:97:69:64:4a:79:2b:55:cf:c5:85:e3:
39:d7:5a:ec:9b:af:7c:55:75:a5:31:65:22:7f:16:
e6:48:c8:3b:72:b8:09:8a:a3:9e:15:25:14:11:46:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:A6:1C:13:C0:EA:32:31:C2:D0:94:E7:10:D3:0C:D1:0E:88:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b1822b6-ad25-3e76-897c-a3789e059e27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1408:17::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:42:af:9d:b1:36:7f:39:5f:7b:9e:a3:da:69:70:08:19:24:
1c:0e:c5:80:66:cd:e7:54:4b:4f:71:eb:52:c9:9d:a3:7e:08:
2d:a3:60:2a:98:9a:d5:b6:99:f5:8c:0b:e6:0c:6d:6b:2f:54:
32:6f:6b:3a:2e:45:ed:82:e8:8b:38:ba:a4:39:a7:03:b9:3e:
65:d3:cc:2f:2d:56:db:4e:5f:bc:0c:92:80:73:3e:fe:b0:d3:
cb:b0:11:bb:37:46:ca:d5:9f:2c:b8:e6:b9:87:75:b4:6f:c0:
bf:85:17:90:67:5c:93:b5:e5:4d:09:53:25:f6:03:c1:ab:40:
93:95:6a:08:c5:da:46:45:14:46:f9:be:5e:68:dc:97:2b:d8:
ca:96:a3:77:f2:f5:9c:2f:fb:4d:ec:e1:87:ca:24:42:c8:23:
2b:e1:63:dd:e2:ca:35:b9:31:6a:0a:8d:ef:4d:9c:fb:51:14:
8f:2a:98:04:4b:41:5a:4c:72:b9:76:a2:51:16:1a:f7:1e:db:
72:77:41:77:b9:57:93:84:10:9b:d3:0e:ad:d0:66:9a:4a:d0:
96:4f:76:64:c5:7b:57:ec:3d:fb:e7:8e:a1:d2:b0:84:82:33:
26:c0:cf:e3:24:a7:8d:7a:bb:43:6a:e2:6d:37:0d:73:df:c9:
e7:81:5e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:47 2025 by rpki-client