Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a5f9d3c-9d19-3f39-96b3-61cb131528bc.roa
File: 5a5f9d3c-9d19-3f39-96b3-61cb131528bc.roa (raw, json)
Hash identifier: ZmwAp1Sp4TAC3h7/YtOtyUGbUlakDU+BAE3+9Vt3Fd8=
Subject key identifier: DD:40:B6:65:78:CE:31:40:1B:3C:D6:05:6A:12:F6:73:77:D8:91:CD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696081DD4FF937A8EFFE60D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a5f9d3c-9d19-3f39-96b3-61cb131528bc.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1013:a000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:81:dd:4f:f9:37:a8:ef:fe:60:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=afd8eaef-68b9-4b18-aa62-0f3438675cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:5e:a6:03:fd:5c:68:eb:22:74:5c:41:40:
4e:2b:4f:1d:97:9b:e7:21:7c:8b:5e:00:f8:54:53:
ee:ad:f5:d2:5b:d0:04:0b:d0:f2:07:33:7d:b1:09:
26:75:c9:c1:e2:b9:07:c8:10:e5:a3:c2:d5:20:f7:
ee:5b:6d:9a:9e:92:fb:95:9e:7f:b9:11:66:5e:62:
cc:a0:0b:86:77:1a:74:72:cb:0f:86:13:33:b8:16:
2c:4f:c8:cb:a1:d1:a3:14:13:82:82:97:3d:9a:7d:
6a:92:82:f4:60:c8:b1:64:58:e3:a0:7a:18:7c:a2:
98:33:1f:36:2d:dc:a4:25:43:2b:db:97:74:cb:f9:
33:77:a8:b8:0c:fd:c7:f5:3b:4a:81:a0:2c:ea:02:
3c:a3:4d:15:08:42:56:0f:72:7a:67:d4:4b:b4:99:
64:96:43:72:68:0e:79:ff:23:c7:18:e6:07:1e:b2:
46:0c:64:2e:65:00:ff:e2:71:57:92:e2:84:72:05:
49:a1:5e:f8:de:06:c4:8a:14:f1:1b:b8:4d:d4:03:
9e:28:06:bb:9f:16:09:ed:9e:2f:ae:56:c2:68:3a:
0b:50:bf:93:ba:71:b8:29:5c:23:95:78:92:da:54:
24:6a:bd:22:d0:dd:c7:f7:1a:0b:e1:fd:38:40:6e:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:40:B6:65:78:CE:31:40:1B:3C:D6:05:6A:12:F6:73:77:D8:91:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a5f9d3c-9d19-3f39-96b3-61cb131528bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1013:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e1:f4:a6:92:00:d0:c6:4e:f2:d7:87:1a:25:f0:fd:52:af:
e2:96:8d:95:43:8d:6c:7a:10:78:15:5a:90:12:bb:b6:a9:35:
51:fa:8f:f0:d6:0c:43:ba:3d:70:c8:8a:f2:54:ac:2e:ec:47:
63:7d:af:d8:8e:9d:9c:30:bd:83:ee:3a:b0:4c:68:8e:a9:a1:
34:d3:40:c4:a4:be:99:fd:84:c3:f5:72:23:34:98:75:72:ef:
2d:de:61:66:de:ef:6a:7e:76:91:9d:06:99:d8:3d:bb:71:a3:
eb:7f:9f:72:88:60:e2:78:39:6f:d2:32:0a:44:d4:8f:e0:02:
bc:74:4b:12:39:ea:d9:0b:e2:05:c1:58:66:26:f4:4a:ef:75:
cc:5c:6c:91:ab:98:f2:76:70:b5:0d:2b:a9:7d:e6:bc:1f:4d:
b1:36:50:a9:57:8f:50:99:9a:80:e6:92:b1:b2:35:3c:54:25:
28:6a:33:89:7a:cb:80:56:84:6a:47:27:63:72:86:55:af:6f:
11:53:80:c0:f7:5d:7b:38:49:54:65:e1:c4:b7:ed:92:7b:5c:
c9:17:d7:ad:7d:7d:c5:9c:c8:53:85:10:06:c4:54:68:99:3d:
f4:23:3e:b1:55:7f:44:11:76:31:98:3e:0a:13:e2:82:99:a2:
cf:ae:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:36 2025 by rpki-client