Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1759d2cd-5e71-37d2-b5e0-d7ca0065c134.roa
File: 1759d2cd-5e71-37d2-b5e0-d7ca0065c134.roa (raw, json)
Hash identifier: Lr4sLZl1v+YVRS60ctqnvyS9HaIkp+NgaNuJ3q78Yc8=
Subject key identifier: A5:8D:5B:88:34:CD:7B:07:FD:17:2B:9E:D1:68:C5:AF:80:8E:2E:ED
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696085CFD2D8CCAE5E65D100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1759d2cd-5e71-37d2-b5e0-d7ca0065c134.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1016:b078::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:85:cf:d2:d8:cc:ae:5e:65:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=8504a9f0-dc06-4d4c-9917-a4dbb162df36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:5b:23:56:ab:07:e3:12:fa:4d:6d:47:d5:
2d:0f:3d:ba:f7:92:68:82:13:21:69:11:7d:7d:6f:
31:47:fe:49:9c:01:46:56:76:e3:31:10:a3:16:b1:
c3:fb:66:fa:a0:fe:77:12:a2:1b:91:57:1c:ca:05:
af:3e:37:49:4a:6b:ed:d1:b0:00:e1:84:5f:cb:ba:
06:bd:1d:d1:56:2d:94:25:de:54:32:ca:9d:45:3f:
c4:de:13:1f:f9:92:7b:f7:42:93:c4:3d:cd:72:a8:
4c:9c:6e:18:ea:ef:7b:47:8b:7c:13:ca:7c:b0:c7:
d4:38:ad:08:84:f1:c2:43:33:51:0a:0f:35:61:be:
76:d4:cd:13:39:66:64:2f:ae:5f:bf:5c:cb:08:9a:
74:d2:8d:c2:a6:61:c0:f2:03:0a:f8:a5:2e:50:21:
4f:cb:52:dd:88:90:3f:ea:0a:b7:7f:09:36:6e:d5:
03:57:57:00:c3:b4:57:c5:b7:bb:7d:85:d4:02:4a:
a7:85:86:9a:10:db:ea:68:93:9a:31:e5:76:27:cd:
ce:70:09:47:51:cf:7b:9d:b1:c5:10:70:53:1a:9d:
71:be:85:2f:2a:7a:66:7a:4f:f0:49:b8:d9:8a:59:
3f:cf:0b:41:87:4b:ad:91:00:77:f2:5b:4f:47:03:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:5B:88:34:CD:7B:07:FD:17:2B:9E:D1:68:C5:AF:80:8E:2E:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1759d2cd-5e71-37d2-b5e0-d7ca0065c134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1016:b078::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:38:a5:01:ca:55:0b:3a:5f:90:73:0c:b9:8a:41:c9:62:26:
5d:a4:3e:7c:ff:b8:ce:0b:d2:4b:94:03:93:b9:63:67:6c:da:
fa:e5:ae:24:7a:15:53:de:38:e6:77:51:a3:41:c1:f9:f6:7d:
64:1f:aa:09:50:c1:45:ee:2f:b0:d7:88:ed:8b:d9:b6:8a:fe:
ab:81:79:ad:07:cb:d1:b9:32:d2:c5:2b:f5:69:c9:0e:c1:31:
1a:15:a4:a1:14:b2:30:c7:25:1e:2b:cf:a2:90:cc:ff:91:89:
78:0b:4e:43:91:d4:fe:76:c1:a8:81:20:76:e6:a1:2c:74:6c:
59:45:07:2e:04:1f:2a:bb:cd:ac:22:01:d0:37:3e:c4:40:ca:
7f:7e:b3:e0:2c:f7:3a:05:38:4b:11:47:ad:cd:e1:ea:7e:aa:
a8:37:3c:bd:e2:48:e8:37:8d:0f:3a:fa:e6:e9:86:12:d3:4e:
fb:d7:bc:4d:ec:e8:75:75:75:5c:2c:ed:d2:7d:ae:4a:2a:0d:
41:92:47:1f:d8:b2:8d:5d:c5:17:d7:48:2e:79:ca:d4:bc:0d:
91:18:b3:39:df:69:45:91:7f:b8:92:7f:0a:db:be:8a:89:f8:
a0:5e:0a:19:d5:cc:52:aa:62:11:38:11:89:cd:df:05:5d:9c:
e7:d3:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:37:11 2025 by rpki-client