Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/761e883f-8501-3522-a473-1bd8aaaa62aa.roa
File: 761e883f-8501-3522-a473-1bd8aaaa62aa.roa (raw, json)
Hash identifier: VXVPJ9tsWQR3516UC7WmGOmjcy0j0SAErz7zgGrvbbI=
Subject key identifier: 39:A9:17:ED:40:87:C6:D0:DB:00:23:64:8E:7A:17:6D:92:88:A9:F1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960793BB998FC77AE1F17C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/761e883f-8501-3522-a473-1bd8aaaa62aa.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1014:a100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:79:3b:b9:98:fc:77:ae:1f:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=92f815fc-de77-431f-86ad-64c627916656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:58:69:1a:8f:cd:57:97:95:06:b3:ad:0c:
24:3c:c8:8d:b1:a8:6a:44:c8:0d:32:d0:7e:0c:7b:
db:11:16:8b:14:ea:4c:94:0a:38:60:c0:04:fd:b1:
d0:9e:fc:e2:4e:16:31:49:9b:c2:f9:62:d7:04:6d:
81:9c:34:04:73:7a:38:39:08:e3:04:40:9c:80:3f:
97:23:f1:e6:81:fa:b9:b2:1e:ce:7c:44:1d:70:5b:
02:f0:17:1a:ae:dd:b4:6c:e4:6c:9d:10:70:b9:f5:
90:fe:05:13:74:b9:05:e0:3e:25:8b:d1:2c:5e:18:
59:c8:d3:73:40:95:0a:2b:b0:4f:3a:69:db:6b:e5:
08:dd:9b:1b:74:bd:14:9e:26:c5:72:75:8c:bb:0a:
57:f3:3f:a5:bf:61:6c:ea:b5:22:aa:f2:f2:f6:9f:
da:57:a1:50:c4:90:f1:c2:5f:26:ff:af:76:73:9b:
aa:7f:cf:77:12:3b:d7:0b:4b:37:78:4e:b5:ef:0e:
cc:9d:46:db:2f:c3:ad:ca:16:58:52:d8:90:21:17:
a4:15:a7:12:ff:a3:41:e1:a3:03:5b:28:44:34:77:
07:2f:61:b2:35:50:61:ea:50:d7:ce:14:f7:5d:3f:
e2:c3:2c:ca:a2:13:69:8b:86:ce:95:03:67:b0:3d:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:17:ED:40:87:C6:D0:DB:00:23:64:8E:7A:17:6D:92:88:A9:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/761e883f-8501-3522-a473-1bd8aaaa62aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1014:a100::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:58:f1:3b:dd:05:23:15:a0:b6:ba:83:b5:b7:86:5b:33:2a:
e0:f9:2e:c7:c5:58:b1:d6:a9:a4:24:b7:f9:72:8a:49:d6:8f:
b4:8b:dd:a2:1c:fc:bc:4d:50:b7:a4:f7:1f:67:3c:ce:4f:a3:
e9:7e:b4:61:40:7e:64:e1:85:9a:5c:9a:f7:2d:15:ea:e1:d2:
75:8f:5c:5d:73:68:60:eb:3e:23:9d:3d:ac:6f:48:33:46:d5:
6f:de:11:e4:ab:b5:a4:f2:99:5a:9a:00:05:50:cb:2f:9c:08:
e0:8a:7b:3e:6d:45:d5:79:f0:4b:2d:a2:ea:1f:06:22:77:ed:
d0:c2:9d:24:cc:da:74:dd:17:82:6d:ec:3b:f0:b2:06:64:de:
2a:21:63:0f:2c:db:c8:11:ab:52:92:0a:0c:8f:73:7b:36:46:
4a:bc:c3:41:fc:69:75:17:f9:c5:0e:4a:fe:08:95:3a:e3:fb:
7f:b9:92:35:19:18:2e:ce:b8:87:9e:38:c8:6a:c9:32:93:6e:
65:57:01:7f:a2:14:2a:8d:df:9f:0d:2d:b5:5c:6d:29:40:e6:
d4:8c:42:8e:51:60:e7:f7:97:ba:b5:dd:4b:1c:d2:ea:28:aa:
43:a9:0e:6a:90:b1:85:db:cb:b0:01:ea:6e:40:2b:0d:92:99:
c5:8b:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:57:35 2025 by rpki-client