Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa
File: d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa (raw, json)
Hash identifier: caGmOV+EAXFsj8nYcQY/9ueDpY7o0W5DeT2ljCdeMWE=
Subject key identifier: DB:0E:70:9D:E5:30:9C:6C:EA:E2:C5:4B:18:EE:87:C6:88:43:50:11
Certificate issuer: /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial: 010D0C9F43285848960B5BBC672AD8294080E380
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2602:815:3003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5b:bc:67:2a:d8:29:40:80:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=d2cf531f-0f67-4dce-a0c7-35a0ab1c2222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:8c:0e:89:fc:f6:0a:2d:1e:ea:22:21:81:
c2:eb:a8:cf:c5:84:64:46:1b:ab:13:58:40:9a:c7:
3c:52:01:0f:70:56:4d:56:fe:7b:29:20:71:48:95:
e0:3d:07:9c:29:f9:f2:5b:58:85:2f:71:a9:02:3b:
a3:fe:40:7e:8f:23:a4:fd:9d:eb:19:e7:da:80:07:
93:9a:45:bc:a1:fc:1c:8d:1b:e0:8f:6d:2d:d9:07:
18:bc:28:6d:b6:79:ee:53:b6:2d:85:df:8c:ce:55:
a6:ab:70:1f:30:25:2c:bd:cd:10:c7:7d:69:90:a5:
dd:1f:e5:59:2f:29:0e:16:a5:9b:37:c1:f3:be:ea:
5b:dd:d1:6e:3b:59:5a:4f:c8:53:a8:fa:f5:2b:69:
a2:37:37:d7:80:50:7d:d4:4e:50:a3:69:55:ee:c2:
40:66:3f:d0:96:3a:76:41:93:d9:21:09:3f:b4:67:
f4:3c:d9:d4:ab:b2:a4:66:16:bf:13:92:08:9e:59:
14:79:0a:df:b5:76:33:27:4b:dd:ac:86:99:04:0f:
0e:28:88:77:d9:ef:54:4f:41:b9:56:20:bb:e5:36:
4e:1c:46:51:b8:88:e3:64:da:56:4b:b2:1e:e8:dd:
31:02:0d:fc:d5:59:ea:8a:6a:2f:94:ef:6b:cf:e1:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:70:9D:E5:30:9C:6C:EA:E2:C5:4B:18:EE:87:C6:88:43:50:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
X509v3 Authority Key Identifier:
keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:815:3003::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:99:b1:2e:36:d4:89:2c:98:0d:f6:03:64:f7:c8:7f:07:21:
d5:90:55:7d:af:c0:99:bb:f6:7a:a7:d3:60:fd:33:90:6e:b2:
14:d3:8f:9b:a5:4f:0f:a6:24:37:f3:5c:4a:ab:a6:59:e7:c2:
0d:cf:a3:9a:d0:1a:b3:54:38:8b:1e:45:cf:29:3a:40:05:68:
28:be:fd:93:d7:f6:80:15:0f:d7:6d:04:59:b0:16:aa:d0:21:
8d:a3:4e:bb:41:5a:fb:e2:85:70:d1:47:0c:cc:96:11:23:e9:
b2:05:4e:5c:c3:33:8c:47:78:83:0a:b4:9b:6c:20:a0:98:47:
de:34:27:1a:74:38:20:fa:7a:72:6c:95:e4:9d:14:31:25:fb:
ce:32:b7:83:dd:3b:a4:64:0b:94:ac:24:97:9a:f8:fa:f5:00:
e3:3c:c6:68:b9:2f:3f:0d:92:ec:07:ba:4b:23:87:15:68:cc:
6f:d1:74:64:60:19:89:9d:eb:dd:cd:b9:e8:9e:23:fd:1f:95:
3d:f5:48:b4:63:d1:8c:13:3b:a3:95:2e:84:5e:9c:6d:0a:af:
f9:85:67:a3:89:23:79:c4:91:01:89:f0:bd:03:d2:04:08:06:
b6:6c:5f:0c:57:51:a7:7b:62:70:69:42:5c:51:59:e5:64:30:
f1:a3:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:26 2025 by rpki-client