Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
File: b4d941c7-94be-35d4-9a43-4e671333d3fb.roa (raw, json)
Hash identifier: Ge+as1MoBpDw8rTT5GoJvLtq6DKmqyXsMaV4H+nTvcs=
Subject key identifier: EC:32:F1:A6:3B:84:7C:B2:2E:CA:CA:92:B5:D9:69:07:06:ED:11:46
Certificate issuer: /CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
Certificate serial: 010D0C9F4328584953C40C3EE11F428117D83600
Authority key identifier: DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 213151
IP address blocks: 2602:fb2a::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:0c:3e:e1:1f:42:81:17:d8:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=f590c616-998a-4c65-8a25-4dc49f5dc62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:94:7a:1e:f2:23:48:1e:97:dd:13:d6:01:
60:24:62:3b:e3:85:af:11:34:17:1c:b2:d4:dc:99:
48:f1:53:62:df:63:72:ec:e0:36:9a:86:b5:09:0e:
ac:ec:1d:27:bf:c7:a7:a3:be:2d:e1:ca:72:d7:73:
4b:49:6e:6f:6e:6d:cc:0b:12:9c:ed:60:58:8e:23:
7e:08:50:47:f2:3c:ee:90:f5:0a:cb:66:3e:20:d7:
6a:d5:75:5f:02:2f:bf:38:59:98:c1:05:06:9c:4c:
57:71:e5:e7:5a:f8:42:df:85:3a:5c:39:93:e3:a6:
e6:3a:4a:8f:ad:ce:83:95:3c:9d:7d:2c:a8:85:77:
95:5d:6f:e1:ec:c7:0e:9d:6b:6b:5d:8c:08:0f:26:
45:ce:f7:3f:5f:9b:c3:0b:8e:1c:18:63:6f:02:3f:
49:df:14:c6:bf:06:d2:55:ef:30:d2:a6:75:8c:bf:
5a:ba:08:ab:e9:3f:92:e8:81:81:b8:f2:92:51:2e:
24:13:08:a7:32:22:88:d5:3f:fa:07:fa:dd:b8:7b:
89:a1:8e:12:e4:20:8a:7c:50:95:d7:3f:8b:61:98:
0e:29:c0:d3:f4:38:d2:03:fa:0c:31:f9:a8:36:07:
14:cf:fa:0b:a4:24:1f:7d:39:28:c9:bc:0a:41:8d:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:F1:A6:3B:84:7C:B2:2E:CA:CA:92:B5:D9:69:07:06:ED:11:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl
X509v3 Authority Key Identifier:
keyid:DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb2a::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:3f:d6:85:a4:71:0c:7a:78:54:17:7e:fc:02:7a:26:aa:39:
a4:99:87:97:1f:8c:2a:a7:dd:d7:07:8d:23:a0:ea:4f:cd:f8:
c8:61:a4:0c:40:3d:ea:bb:21:86:67:34:b0:8d:2a:de:32:a9:
23:47:12:76:85:54:0a:da:96:9f:dc:04:96:d0:c2:db:30:e7:
dc:48:b6:3c:c6:df:c3:53:46:de:3a:84:ba:4f:d5:f4:20:9a:
1b:77:20:9c:fd:bd:51:49:b3:6b:7b:b3:aa:2b:88:0a:f0:5f:
84:e2:44:1e:d6:4f:6b:c7:34:8c:7c:a3:4c:bb:b9:59:e4:75:
cf:3f:af:3c:f7:b2:4f:13:ab:3f:a3:ee:e5:ac:3f:33:2c:45:
bd:31:c4:aa:e5:30:e7:41:6b:88:2d:54:ae:e2:1e:ae:0b:1d:
84:52:4c:e0:de:e4:19:12:7a:0b:ed:d9:ef:92:42:90:66:87:
a2:7d:36:13:c6:b0:79:59:45:bc:e5:d7:4d:92:a0:64:4a:0e:
49:78:28:2a:9c:71:69:0c:89:7f:52:91:f7:b8:d9:ce:75:eb:
fa:15:2b:8f:b5:bb:7f:62:5d:60:dc:6e:82:e5:46:07:7a:9a:
9a:94:a5:53:82:18:fc:7f:e2:0c:b5:a9:e9:e4:10:8d:e7:6a:
d8:b7:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:17:54 2025 by rpki-client