Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
File: 85f2ea3c-4e52-3222-94c6-afd6e810592b.roa (raw, json)
Hash identifier: XpHurLnKutzfx3ErNULly/u+3fmDt+bWf4m2PB72/Ks=
Subject key identifier: E2:1A:E8:EA:E9:6C:AB:65:0B:A7:43:4E:AC:51:AA:1F:18:20:C1:CF
Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial: 010D0C9F4328584950F96983BF0926B67D9D9AC0
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 16509
IP address blocks: 2602:fa28::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:69:83:bf:09:26:b6:7d:9d:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=3c9b0b3b-1ac7-4843-bfe7-ad01d261231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:9a:05:eb:ac:60:51:a0:d1:24:07:e6:96:
d9:0d:e0:86:16:7e:82:d7:fd:06:ff:ed:0c:be:e0:
29:5c:90:a1:12:ad:22:c2:cc:95:4f:a9:5a:1f:5a:
17:29:38:e9:c6:f3:9c:22:2a:9c:6c:c9:8f:5a:e9:
c5:8d:a9:10:13:72:00:34:5f:1c:17:16:ff:4d:21:
f4:d0:ff:ab:81:bb:51:90:d2:1d:af:3f:00:76:9d:
c2:74:e8:0f:6f:dd:9e:26:e0:bf:90:f4:2d:bf:95:
82:12:68:96:0a:1c:24:2b:39:4a:33:c2:52:43:99:
fe:1d:f7:d0:9a:b7:e4:2f:4c:bd:9b:3c:d9:7d:ce:
3f:44:45:16:c8:ff:7d:24:4e:98:fc:1f:4a:f9:9c:
ba:f4:b0:5e:96:d0:24:81:d1:73:db:95:c3:a2:8f:
c0:8f:7a:33:b2:b9:b8:97:eb:f5:3c:76:e4:a8:8d:
f7:34:c4:51:fb:41:70:72:73:4a:71:e6:c6:dd:b2:
93:98:ac:b6:cc:1e:1e:e4:7a:01:be:45:e0:7a:c3:
37:95:78:8d:74:1e:a4:1a:d4:73:3c:a1:0d:8f:18:
07:4d:4b:94:b5:0c:82:72:ca:2a:99:ae:32:1f:11:
0f:25:d9:04:f2:93:fb:e2:c6:0f:a9:14:2b:5c:5d:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:E8:EA:E9:6C:AB:65:0B:A7:43:4E:AC:51:AA:1F:18:20:C1:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
X509v3 Authority Key Identifier:
keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa28::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ed:69:30:14:a7:c4:e5:14:4f:8c:45:78:35:c1:51:2a:54:
4e:4d:85:84:b4:aa:34:44:b4:29:83:a5:ba:bc:8e:4f:71:e8:
7f:61:c8:5c:b1:3a:f6:5a:20:e5:5f:cb:19:c4:57:88:b5:e7:
1b:fc:d7:d5:c7:29:79:eb:c9:9e:33:1e:9b:ee:08:d9:31:5e:
04:66:e4:d2:a8:09:5c:f0:45:cb:39:18:12:d8:d9:c7:17:22:
5a:bc:c5:25:fb:d2:55:b9:ff:28:6a:36:d2:a2:0c:45:24:91:
80:e1:2a:19:3b:ce:00:77:a1:4a:66:60:25:4e:7d:e5:e8:45:
c9:97:fb:a2:0a:15:70:1c:66:4b:ca:70:20:ba:27:b9:0b:4e:
cf:25:b6:88:69:8d:e7:fc:e7:d7:11:43:39:19:0d:2f:58:f5:
dc:3d:fb:ee:bb:08:5f:87:df:93:6d:8c:17:da:61:ad:27:b3:
12:49:d1:d4:e5:9d:73:a5:d6:42:bc:0e:b1:f8:9f:4b:97:57:
ab:ba:4e:7b:ed:aa:02:79:6b:74:fd:10:36:10:5d:97:be:83:
86:74:9f:29:78:47:ca:15:50:36:a8:e5:d5:1e:85:41:18:47:
47:98:89:fd:4e:50:09:73:b6:3e:c3:c4:eb:da:55:0e:5b:33:
db:0a:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:07 2025 by rpki-client