Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53e4c2e4-b880-372c-be74-669c144d8d8b.roa
File: 53e4c2e4-b880-372c-be74-669c144d8d8b.roa (raw, json)
Hash identifier: gJofgBTMr7Q4lpxynkevPUzlGRnegRGibo72Tj9lUaw=
Subject key identifier: 67:E0:0C:E9:99:94:F6:A0:82:E0:BB:3C:B1:A1:82:F9:A2:EE:F4:38
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB4D8339167A0021DA1480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53e4c2e4-b880-372c-be74-669c144d8d8b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1002:b000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4d:83:39:16:7a:00:21:da:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=8b7ab350-0851-4baa-8979-c18b53ce3dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:79:46:aa:9b:48:b5:a7:28:f1:5a:e8:fc:
24:e0:c2:c0:1a:b7:ae:55:82:d1:82:7c:b3:0d:94:
be:a1:0c:54:fc:d4:f1:3b:72:06:0a:60:49:b4:ae:
cf:8b:22:84:71:6d:ff:49:ca:5e:34:b3:62:49:7f:
cf:fe:61:a8:04:64:64:8e:fc:bd:72:29:09:44:36:
ca:7d:79:7e:29:fe:67:11:07:4b:11:f4:31:a1:00:
05:2b:cb:2c:f1:fc:7e:51:d2:19:67:2e:69:5e:0f:
22:f7:e5:b7:88:35:c9:5d:e4:6d:ba:73:1a:ad:a6:
2a:76:fe:c1:2c:7e:8f:f0:33:58:7b:2b:ad:e1:36:
bb:7b:f4:67:ce:ca:a8:89:76:63:22:d9:3e:c7:99:
d1:77:54:65:f3:f0:36:f0:cd:19:46:df:88:c5:43:
c0:80:fe:55:de:33:9c:59:1b:c4:fa:65:b5:7a:c7:
fa:94:b6:1f:39:da:b7:c3:a0:a2:78:af:3c:54:f4:
5f:51:f5:1e:3f:a8:64:52:3f:09:17:45:2c:12:5e:
95:e1:e5:92:97:a7:f5:2d:a9:b6:1c:a7:b6:17:e6:
35:da:27:f3:80:7d:5b:36:dd:18:46:e7:d0:2d:80:
00:7b:9d:c2:81:50:43:6f:cc:1e:9c:a0:12:f6:16:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E0:0C:E9:99:94:F6:A0:82:E0:BB:3C:B1:A1:82:F9:A2:EE:F4:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53e4c2e4-b880-372c-be74-669c144d8d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1002:b000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:1a:c8:b6:22:35:67:d3:97:59:14:3c:a5:40:ab:eb:48:88:
c0:ce:a9:7e:5e:7d:9a:28:03:12:ee:ca:55:ef:67:c2:5a:c9:
b5:4d:ed:a6:a3:2a:94:d1:b5:3b:3a:57:c4:6b:55:db:13:0d:
59:42:dd:41:ca:e3:21:4b:00:6f:6d:e7:65:99:13:24:f0:3d:
8e:d9:88:9e:64:08:78:23:93:88:9d:d1:cd:0b:01:b5:2e:4f:
fd:2d:f0:ba:36:c5:60:e9:dd:4c:41:ec:b4:7f:2e:9e:12:3b:
15:fb:ee:06:b3:da:ce:55:3a:89:48:5b:46:9a:7d:cd:05:10:
e2:84:d8:ee:25:e8:19:11:24:fa:a8:0f:b6:4b:35:e2:23:9e:
4a:3a:ea:38:6c:0b:0e:74:86:fa:70:ba:54:8c:65:56:5b:45:
fc:64:22:19:a7:b2:1e:05:91:cf:d7:70:82:4b:dd:31:2e:51:
d9:1d:d5:cc:48:1f:3f:24:99:15:22:74:d7:68:be:ad:65:73:
4f:bf:db:37:1c:f7:2a:73:ed:5f:93:9d:8b:fc:1e:2d:aa:ce:
3a:c3:72:c2:6a:89:44:63:72:7d:89:0c:9d:ad:7e:e1:b2:82:
93:17:e5:e9:35:59:a2:f2:75:37:29:dc:ec:66:11:ba:02:a7:
80:10:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:03:34 2025 by rpki-client