Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa
File: 25dbca42-1fd0-38ab-852a-2e2b01909293.roa (raw, json)
Hash identifier: zEvCSOh9wZwu5SjAWMGeiSNxnJIpz0k9sRDuZGXZ8yo=
Subject key identifier: D5:75:1B:DB:BD:C0:B7:C8:8F:F3:86:44:0E:3F:5D:DE:4D:77:47:66
Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Certificate serial: 010D0C9F43285848FC8090E0D1BA96155CCDE120
Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa
Signing time: Mon 24 Feb 2025 06:49:38 +0000
ROA not before: Mon 24 Feb 2025 06:49:38 +0000
ROA not after: Sun 25 May 2025 05:49:38 +0000
asID: 64289
IP address blocks: 2602:2ea::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fc:80:90:e0:d1:ba:96:15:5c:cd:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Validity
Not Before: Feb 24 06:49:38 2025 GMT
Not After : May 25 05:49:38 2025 GMT
Subject: CN=de859aaa-75e4-475d-b404-b2e001f5ed50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:5e:80:a3:e0:40:da:0b:d5:df:ab:7e:0a:
4d:1f:00:44:a9:30:2d:a5:2c:a3:e3:68:eb:34:34:
97:cb:45:1e:30:d0:a4:27:8d:21:c9:cd:7f:d2:37:
90:08:ee:1a:14:6c:37:c4:1f:e8:09:81:74:fd:1a:
27:69:54:30:74:25:31:f4:90:70:be:e8:38:21:2b:
b1:c6:12:ed:f7:e6:51:48:93:fa:bf:30:13:6d:89:
f2:9f:59:15:40:48:17:7c:63:d4:cc:4a:10:80:fc:
14:8a:da:66:09:f4:92:1b:08:12:61:90:19:cd:b1:
a0:c1:08:28:5d:6b:b7:ba:8f:8d:47:ef:c8:6c:8f:
80:98:d7:c5:29:aa:96:e6:fa:64:cc:3f:55:fe:6a:
46:06:a9:02:48:51:14:1a:25:d0:2f:37:c9:b4:0b:
f2:6a:80:75:95:fc:77:71:ad:15:d4:b3:d0:0c:4b:
bd:3d:41:5b:68:48:ef:eb:65:3a:fd:f4:bb:c9:b9:
0e:e7:25:5b:08:cb:5b:33:b9:5a:65:b7:d4:89:16:
ca:57:6e:01:5b:79:35:64:b6:2d:01:ed:dc:4a:de:
57:49:0a:68:2b:14:14:73:3c:ed:fa:26:f9:f8:55:
42:b3:70:18:ef:3c:67:b6:cc:df:f8:b1:4d:05:ef:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:1B:DB:BD:C0:B7:C8:8F:F3:86:44:0E:3F:5D:DE:4D:77:47:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl
X509v3 Authority Key Identifier:
keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2ea::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:6e:81:43:91:ac:61:ad:6e:f8:a9:b9:96:c4:d4:8f:24:79:
1d:c3:29:fc:09:30:c4:bd:ae:22:78:a9:9e:95:b7:98:5b:53:
6e:40:0a:1d:44:7e:c3:33:d9:13:a4:5d:0a:9c:64:2d:76:57:
68:f1:78:49:10:13:53:f7:27:e1:cc:54:1f:8e:01:d3:96:39:
8e:03:22:64:26:91:cd:bd:a4:fd:0f:e7:5d:71:41:24:73:94:
e7:ec:ed:4b:ba:a0:46:66:3e:e3:e7:e6:ee:a4:14:c9:36:f3:
bf:ef:de:13:72:a8:d6:43:11:84:9f:8f:4b:a0:1d:40:79:24:
6b:28:d5:3e:05:a8:3e:b3:38:3d:d9:7c:29:65:18:40:87:6b:
d2:eb:9c:90:b9:d6:9f:5f:3e:12:3b:b0:a4:c2:e9:9d:4b:d0:
68:58:93:8e:74:6e:03:d7:3e:cd:6e:34:fb:95:f6:1e:90:43:
63:c9:02:1b:29:ad:8a:37:d1:de:fe:da:96:eb:25:bd:4c:6b:
bf:ff:2e:ba:93:ad:37:23:9c:ca:d5:c3:c1:e6:9d:b2:30:ba:
98:10:21:70:d5:9e:e6:d7:38:c7:75:14:33:9c:b6:84:43:eb:
fd:e9:d3:62:4d:41:74:5b:48:5d:f2:58:4f:e5:e2:fe:e9:3d:
cc:28:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:49 2025 by rpki-client