Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e8108f7-ba51-345a-9293-4fce36e3d4be.roa
File: 8e8108f7-ba51-345a-9293-4fce36e3d4be.roa (raw, json)
Hash identifier: lBHXKh+b0nGvlyqZKOZWEF2NjqQXWNdVb8Oa6877tZI=
Subject key identifier: 1F:61:18:D2:BC:8B:89:5C:9B:88:4F:4E:26:8E:76:25:53:5E:A2:2D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696089059E9E6EAADAAC06E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e8108f7-ba51-345a-9293-4fce36e3d4be.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1017:b830::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:89:05:9e:9e:6e:aa:da:ac:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=a84d7c0e-a21d-4040-9c40-13068a3c25f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:b1:a1:ae:6d:79:09:89:03:f8:b4:a3:f5:
43:84:a9:b0:46:5f:cc:6d:d8:81:0e:bb:ad:16:12:
b8:d8:be:eb:75:4e:41:a3:b5:74:90:a6:71:4d:01:
dc:cf:54:79:19:cc:eb:de:65:2d:b0:2a:c5:d9:2a:
7d:d6:72:38:0e:b7:eb:2a:ea:c3:e1:66:16:33:59:
7b:99:6e:de:30:da:c0:40:96:14:74:c5:11:c3:8d:
36:c9:fb:bf:1b:4e:2d:a6:2a:94:a6:75:e6:1c:80:
67:6c:84:d8:9e:58:2d:df:86:31:c3:5d:63:e2:4b:
3e:8f:dc:9d:d5:6f:b0:35:3f:db:03:b7:cc:25:4c:
0c:d6:5a:16:71:7f:cd:80:fa:a1:5f:43:af:b4:64:
c9:28:f5:85:70:0a:d5:3b:0f:2d:ba:bf:84:27:88:
25:cd:c5:00:a0:36:0c:a6:f1:f9:db:d6:48:d7:ff:
aa:29:78:77:cc:30:6b:ac:9b:65:77:27:58:a1:21:
e5:f7:07:7a:4e:d3:f6:55:0c:43:2f:68:37:03:ed:
9f:34:67:d9:1a:13:98:44:bf:ff:5f:d9:8a:d9:83:
29:42:64:11:b0:44:59:9c:10:2f:7b:15:f8:08:53:
cf:b5:5e:17:f6:e7:f7:6d:69:f8:86:11:9d:61:d6:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:61:18:D2:BC:8B:89:5C:9B:88:4F:4E:26:8E:76:25:53:5E:A2:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e8108f7-ba51-345a-9293-4fce36e3d4be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1017:b830::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:8d:ab:33:08:d7:05:a8:9f:3c:bd:3c:75:5d:1b:62:64:8c:
59:ed:fb:df:58:fe:a4:4c:fc:b8:b6:5d:a1:81:3e:89:a2:57:
89:f4:c1:14:57:96:91:19:43:06:bd:32:e9:37:5e:d3:43:6b:
83:bb:da:db:2f:96:d3:33:92:73:b4:70:fb:1c:6e:f2:c9:ac:
3c:67:5c:62:90:58:0d:c7:a7:a8:80:6d:4c:fc:e1:3d:4a:6e:
d0:fc:fc:e4:75:48:23:fa:57:19:8a:e2:2a:3c:b2:3f:9f:d6:
91:77:b3:07:a9:4f:dd:ca:66:87:01:11:0d:a7:a5:7c:32:b4:
3b:ed:5b:40:ff:25:9d:0a:65:c1:ad:1e:9f:3b:1b:4d:98:50:
7e:52:88:61:23:48:7f:44:fd:57:6b:7c:d6:8e:ea:54:de:6e:
ee:bd:6c:e3:00:fd:9b:5d:9e:12:ab:fc:d9:bf:e0:f5:6a:cb:
09:75:81:71:0c:c4:17:6e:30:80:9f:a1:59:af:94:74:c1:16:
31:43:b5:4d:38:9b:d9:e1:4b:89:ef:cc:c4:41:b6:eb:6f:97:
b5:97:7c:c2:f9:8f:eb:69:4a:6f:37:f8:87:d7:9b:39:06:6e:
16:d8:26:32:c3:c4:3f:0b:ed:ed:d4:01:31:44:a5:40:91:5b:
0e:e2:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:02 2025 by rpki-client