Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8daafaa-f1ae-36bf-9c29-1087d0faa1f3.roa
File: d8daafaa-f1ae-36bf-9c29-1087d0faa1f3.roa (raw, json)
Hash identifier: vxIGalrBpvRuccDxnEoE2UmjYdN8mlYLi9/awCxlTKk=
Subject key identifier: 9E:33:15:91:76:08:7D:8A:8A:DB:FF:9A:03:81:0C:77:BA:BF:3F:93
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960854845BA1D190ED0B620
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8daafaa-f1ae-36bf-9c29-1087d0faa1f3.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1016:a110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:85:48:45:ba:1d:19:0e:d0:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=2be0ea26-734a-4862-bbc5-48327c012bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:c8:ed:6f:21:24:2a:f5:87:38:5a:c3:36:
5d:e7:5c:b7:aa:a1:5d:ce:48:e0:0a:84:18:ae:89:
09:fb:3b:8b:78:96:6b:42:7d:23:b1:9f:4b:2f:68:
ea:c6:02:f0:ab:a6:a6:90:d3:c0:fa:3f:59:2e:e0:
2f:72:4a:c1:cd:6a:98:19:17:b4:13:8e:63:41:d0:
eb:29:49:c3:a0:2d:91:16:bc:5e:78:56:de:9e:4f:
8f:b7:17:0f:f8:e6:7f:5d:0b:c5:9e:a7:a4:4d:aa:
0c:f4:0c:d7:0e:e5:0b:13:06:8e:70:29:ac:aa:e5:
44:5b:ae:de:76:31:06:3c:80:af:35:80:aa:52:47:
5f:1f:f6:b3:35:7b:92:7e:67:1e:52:9d:f6:7f:06:
89:71:8b:cf:f7:5f:35:aa:53:6a:19:8a:88:6c:f5:
32:f4:f9:37:67:a3:c9:5c:4a:32:db:44:7a:26:01:
5a:54:08:72:ae:77:96:83:7b:1a:48:61:bc:02:48:
49:de:ea:0c:fb:2f:b3:4c:5b:10:24:b5:a3:ce:c4:
9c:eb:d6:ad:bc:41:95:77:86:f6:6b:19:0a:ee:c3:
2f:07:0f:ed:d5:5a:77:6f:76:22:c5:09:f2:dd:a5:
a5:9d:eb:35:a7:02:1d:60:e9:c0:25:65:f8:97:a0:
6c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:15:91:76:08:7D:8A:8A:DB:FF:9A:03:81:0C:77:BA:BF:3F:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8daafaa-f1ae-36bf-9c29-1087d0faa1f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1016:a110::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:e9:00:e4:3d:d5:9b:ff:4e:d9:b6:b0:b2:10:97:9c:18:e6:
95:01:77:a7:96:51:0e:71:94:15:0e:01:f5:d4:8a:97:b3:13:
6d:fa:d0:e1:b1:f3:5c:47:93:95:a5:73:0b:9c:c1:c4:32:78:
95:2b:a8:ed:5c:96:aa:a4:39:9a:b6:4d:d8:73:09:ae:b9:6c:
c0:62:9b:31:02:12:9c:86:9e:5a:dd:c2:04:e4:b2:d9:cf:94:
c1:1a:40:96:b3:7e:b8:01:12:bf:28:38:b5:34:8c:a9:49:ff:
07:8e:f6:14:f9:86:3f:1c:8e:fd:28:21:ca:09:9d:e0:12:5e:
79:6b:0f:88:69:90:87:c4:dd:40:64:18:cd:03:e7:55:67:b8:
9d:60:3a:55:42:69:e3:ce:91:9f:d4:c8:1e:9c:71:6f:49:52:
9b:6e:92:eb:9e:81:62:79:4f:40:bd:4f:f6:53:d6:1e:cf:23:
e8:9b:8d:1b:0c:a6:18:3f:2e:ba:54:30:f6:fc:06:0a:9b:2e:
50:b3:60:65:f6:44:2d:9e:48:7b:ea:f9:42:b9:5e:60:90:2a:
73:78:2b:a0:4b:4e:5c:a8:9c:d7:0c:fb:c1:70:36:2f:ac:d7:
ae:12:b6:eb:10:f2:95:a3:d2:cd:bb:24:53:06:42:09:b9:db:
fe:2d:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:38 2025 by rpki-client