Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/2239dba6-cf05-33c7-91ff-2dfbbcb19211.roa
File: 2239dba6-cf05-33c7-91ff-2dfbbcb19211.roa (raw, json)
Hash identifier: nDeNzmmJYErgCA5Dd3nJjDOEKNFKeQ4c8JdiPbKq40I=
Subject key identifier: B5:EB:32:BB:0A:30:47:2E:94:B5:89:BE:79:18:3E:CC:27:CF:57:57
Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial: 010D0C9F432858493ED3D1E2BC7D84E92D479A00
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/2239dba6-cf05-33c7-91ff-2dfbbcb19211.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 138997
IP address blocks: 2602:fbda:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d1:e2:bc:7d:84:e9:2d:47:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=93815aaf-30e8-4350-92cc-994b4c6258dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:4c:e1:b8:82:98:0a:38:5c:25:78:f5:ea:
ea:a5:7d:44:bf:65:a7:16:81:66:3f:75:ca:5d:13:
f7:ca:31:ab:07:22:c7:1d:d5:90:ac:07:a7:cb:19:
c1:e7:91:72:82:e1:09:0e:79:fa:a0:e5:15:17:2f:
f5:50:81:3d:5c:27:c6:92:c3:89:44:63:fc:82:77:
93:a4:49:97:6c:76:80:33:74:29:23:53:6b:9f:52:
69:98:5a:50:66:b8:fc:3a:0a:7f:5c:29:15:39:46:
90:c1:88:c5:79:62:92:ad:0e:e0:27:f7:70:9a:d3:
84:62:e8:11:b5:f4:73:29:63:0a:06:b1:e7:0c:a9:
65:24:fa:bb:8c:77:2d:ff:c6:0a:f5:f6:ce:f6:51:
1c:2c:2f:58:c3:95:6e:3a:81:b3:9c:da:39:11:e4:
e7:5a:de:53:85:71:89:c8:48:71:4b:72:aa:e7:68:
b5:e4:2a:bf:bd:69:70:f6:eb:ee:24:3d:8c:7c:f5:
27:8e:72:aa:bc:9c:71:3d:85:4e:be:91:19:a1:74:
74:59:ed:8f:e9:3b:2d:2f:11:12:ec:54:5a:5c:74:
45:24:ed:f6:29:91:07:5a:89:13:e1:21:d2:8b:00:
f8:9b:35:96:d5:c5:b3:fb:47:6d:60:07:2a:33:4c:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EB:32:BB:0A:30:47:2E:94:B5:89:BE:79:18:3E:CC:27:CF:57:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/2239dba6-cf05-33c7-91ff-2dfbbcb19211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl
X509v3 Authority Key Identifier:
keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbda:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b8:8b:de:1d:db:a7:2d:82:06:3e:a2:69:7b:62:95:a5:14:
fa:1b:30:96:80:82:f7:d8:65:bb:c5:95:d0:de:46:6f:e0:a4:
34:d3:99:30:41:09:bd:1d:4f:7e:7a:0d:29:b4:93:1d:56:f3:
e3:a1:c9:b9:8b:3b:45:06:c3:ff:a9:78:51:70:b8:a9:30:3e:
a4:8f:2c:03:a0:7f:1b:87:9f:d0:f6:b9:a2:0a:24:61:c1:92:
d4:4e:7e:37:70:0a:11:fb:d9:3f:b9:d4:27:b3:a7:90:92:f0:
fd:a4:84:61:16:c2:e6:0c:dd:4e:eb:6f:68:b6:4b:df:85:02:
99:41:98:c6:e8:bb:c1:7b:d3:c9:2c:65:90:7e:aa:6e:a7:57:
49:7f:77:3b:31:0f:f7:fe:3d:56:ad:8d:93:a8:b1:cd:52:77:
d3:2e:a5:2a:d0:d4:d0:14:a1:a0:f7:81:53:ce:7e:83:44:64:
ef:5b:a8:a7:d4:2f:db:55:86:44:2f:e4:14:7d:05:07:4b:20:
91:be:a1:33:0d:2d:26:a5:18:0e:50:78:e9:ca:11:a3:74:20:
2b:e7:de:f9:4d:b5:e9:ba:8f:cf:10:82:af:3d:c4:59:12:db:
6e:e7:40:35:2c:c5:a5:bd:68:d3:e6:44:a7:48:b1:44:18:90:
18:50:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:26:41 2025 by rpki-client