Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa
File: 34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa (raw, json)
Hash identifier: KnSTVQDwF3+YQ7sLnZbJADtW2jrA8pfKqX9vSwB/aI0=
Subject key identifier: 3D:5D:93:7D:3A:76:03:FD:33:40:70:58:1F:68:59:3E:E3:5B:19:F0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424B1BCF9C5FFB8143AABD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2607:f160:40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:1b:cf:9c:5f:fb:81:43:aa:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=3529e8df-051b-4b65-b856-2e269791bc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:b0:cc:89:53:60:66:0a:7c:a6:93:04:82:
77:fb:45:37:93:1a:7e:0d:7a:ec:1e:1d:da:0a:5e:
40:5d:cf:57:37:a1:be:bd:3a:e8:7b:1a:28:ed:14:
55:ff:c1:6f:4b:24:4b:e3:b4:98:76:53:b7:a9:ae:
63:99:54:9b:d0:78:fa:9f:81:c8:fa:0d:d7:47:cb:
6b:a5:aa:4e:b6:c7:02:e6:9c:4c:27:49:64:57:e2:
2c:5c:6b:72:5a:60:68:ea:df:e8:99:bd:88:fd:9a:
28:09:99:96:92:15:7d:88:42:32:ea:78:90:7d:3a:
80:3a:34:84:c8:b8:2a:ab:f8:fa:9e:2e:e7:e5:a1:
6f:77:c9:bf:85:0f:34:7b:c0:df:52:53:fa:c4:2a:
d4:a0:d5:38:8f:ce:a1:6a:9c:b4:26:9f:79:d3:15:
02:1b:e8:7b:3f:ba:25:99:e6:56:66:92:89:60:c4:
c5:b7:7f:15:30:5c:60:56:96:cc:0d:6e:5f:33:92:
fa:18:64:4b:35:65:50:e2:76:3e:c1:fc:0f:97:01:
64:27:71:79:e8:4b:1b:cd:16:69:c0:98:6b:1e:e5:
26:54:20:21:9d:be:e4:f5:64:84:f8:b9:aa:9d:0c:
b3:df:8c:42:e6:74:db:4a:8a:4e:37:c5:8a:6b:43:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5D:93:7D:3A:76:03:FD:33:40:70:58:1F:68:59:3E:E3:5B:19:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f160:40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:40:db:5f:40:d3:7a:5f:99:43:66:de:af:a5:19:91:a3:81:
73:e5:61:fc:ff:57:be:36:0b:c2:b8:a6:0b:f4:3a:b2:e3:d6:
8f:07:84:97:29:55:0f:90:c3:d8:c0:59:f9:da:4b:a0:9d:32:
03:e8:d1:75:6a:73:a5:67:a9:c9:35:6f:c5:b0:c7:29:04:ac:
e9:42:e4:69:a1:62:ac:ec:1f:57:86:12:5e:f1:57:8f:5d:ab:
8c:4f:52:5e:db:3a:b2:96:8f:78:77:d0:54:b9:a7:bf:e0:71:
23:16:00:a0:d1:bf:de:a6:12:d9:84:d9:e7:e8:73:2a:d4:26:
b2:7b:17:74:58:b4:50:22:1c:e2:8b:ef:93:b3:6d:a3:d0:0e:
10:ff:0d:53:92:4e:af:1b:94:1b:5b:b8:15:e0:d3:e7:ec:4a:
b1:1a:0a:74:66:82:bf:2f:d1:22:bc:d4:94:f4:39:51:5b:55:
84:17:15:a3:8d:ff:ff:98:02:43:a9:f8:a3:e7:be:b5:1a:2b:
cc:ac:bf:0a:fa:ea:12:fe:61:c7:09:38:a0:6e:5b:a9:24:ff:
ef:88:0f:1e:70:43:ab:b3:f4:0f:24:ef:b0:82:01:79:5b:0a:
3c:e1:34:34:48:b7:e6:c3:ba:cb:30:ea:0b:79:9d:6d:12:5e:
77:78:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:03 2025 by rpki-client