Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4813f34-148a-38bb-8004-9eea25a76a60.roa
File: d4813f34-148a-38bb-8004-9eea25a76a60.roa (raw, json)
Hash identifier: Joe0cfhJwWM8z/JDRjKFW8lWwxF2OS5h98a5saMnEdQ=
Subject key identifier: 70:43:51:44:05:40:74:54:AF:50:E2:E1:0F:9A:13:78:87:7D:F5:A0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960841A50EE08404D11D3A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4813f34-148a-38bb-8004-9eea25a76a60.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1015:b140::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:84:1a:50:ee:08:40:4d:11:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=a99cb23e-94f0-4b9d-a293-e91ebdbb50ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:b6:02:11:db:92:d4:61:b6:f5:41:4f:4e:
00:d2:75:cb:0b:07:a8:43:08:e4:8b:a3:91:dc:68:
9a:a6:38:a5:a1:bd:6d:37:fb:ba:81:11:93:c0:35:
d1:8e:2f:de:e3:cb:41:c6:5b:0c:e1:05:82:30:03:
72:af:4b:b8:94:19:2a:36:dc:85:ae:73:f7:12:f3:
5e:66:63:05:de:3f:b4:93:31:a7:9a:0b:84:c0:13:
a9:4d:67:a2:eb:04:a2:e5:2e:ea:18:45:b0:3d:f1:
d1:3a:1b:32:d0:65:15:0d:32:de:ed:66:52:4f:f1:
5f:5e:7e:c2:4f:b4:44:55:c9:d0:4a:17:12:72:e6:
43:9b:f1:eb:3c:f6:a6:fc:49:47:cf:56:df:30:41:
70:53:74:53:39:33:5c:6b:eb:00:96:33:c7:98:ae:
e3:53:ec:59:93:1a:93:dd:7c:2c:44:a6:82:fe:96:
53:56:55:45:67:8c:e0:4f:9c:32:a8:27:1f:ae:f9:
3a:2e:0b:8e:74:8b:56:c8:f6:45:d3:ae:17:f8:80:
a3:8e:e1:fd:b6:67:3a:65:17:71:7d:61:89:03:77:
ea:71:0e:33:b4:6f:56:2e:41:8f:c6:a8:b4:98:5e:
8e:55:68:4d:53:33:f2:72:17:78:bd:54:12:5a:85:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:51:44:05:40:74:54:AF:50:E2:E1:0F:9A:13:78:87:7D:F5:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4813f34-148a-38bb-8004-9eea25a76a60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1015:b140::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:86:8d:3a:5a:fa:c4:85:06:74:b1:04:54:79:64:f3:03:86:
d9:c8:6a:a4:5a:2a:62:80:95:c5:59:80:2c:e5:23:cf:b2:6f:
33:a4:c6:a6:9a:ac:cd:ce:69:f6:4a:20:f6:39:19:c6:d1:a4:
e8:69:29:34:e3:70:fd:9e:55:f7:8e:3e:43:90:da:c5:8d:fa:
d0:a0:f4:40:09:17:33:ad:42:7d:8f:a2:b1:94:47:0e:5f:7c:
af:dc:d1:ce:51:af:b3:17:4d:1d:66:3a:5d:25:c9:76:7a:9e:
ef:3f:bf:29:ce:aa:b7:a6:24:9a:cd:c7:8a:3a:19:c5:7c:ef:
38:90:eb:02:d9:50:01:cf:35:b1:86:be:c3:fb:06:01:a0:08:
e9:31:80:f2:4e:ae:ca:38:5a:01:59:0c:67:18:b3:30:97:14:
54:6e:d8:c0:d7:09:74:38:f1:49:13:5d:1f:70:77:90:7a:0a:
df:74:c8:f4:15:b5:af:26:d6:2d:31:a8:1f:44:93:38:51:1c:
0e:f4:1d:90:52:3e:16:d2:a2:21:d5:84:a7:ea:f5:72:99:8f:
da:ce:80:b8:1f:66:f6:26:a0:7b:ce:78:d7:a3:da:b7:7a:85:
9b:74:df:a0:ea:33:71:f0:4d:cf:c1:86:6e:eb:44:13:1b:46:
bf:46:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:55 2025 by rpki-client