Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/922a7821-890e-3cd6-a1c2-f6a156563ec2.roa
File: 922a7821-890e-3cd6-a1c2-f6a156563ec2.roa (raw, json)
Hash identifier: 2p/Ur5/IS2pfr4L8ILr8UgSomabI4an1TIrcMmSMzeE=
Subject key identifier: BC:9B:6E:A2:64:43:66:0F:21:88:2E:EA:16:F1:89:46:B1:13:11:81
Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial: 010D0C9F4328584953C41862B593F7147441AEC0
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/922a7821-890e-3cd6-a1c2-f6a156563ec2.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2602:fa28:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:18:62:b5:93:f7:14:74:41:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=0e1effea-5996-4075-8125-0c17a6fc06b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:7e:af:5c:00:57:db:bf:09:b6:dc:85:5b:
7a:df:c6:3e:be:99:45:73:bb:f1:f5:f0:04:23:94:
fc:d5:02:18:20:94:ea:c8:e6:b9:e1:da:70:b8:fd:
36:87:db:a7:50:de:10:3d:98:e6:04:e9:b7:ab:62:
a7:85:ec:af:39:6b:49:0c:8a:9f:37:c7:5d:b6:b6:
6b:e2:aa:4f:3a:45:09:ff:df:54:b5:03:f9:22:00:
b7:3f:ec:7e:61:60:04:86:85:f5:6c:4c:0d:39:64:
ad:b0:64:ae:5c:9e:b9:fa:4b:fd:b6:0b:b1:a8:44:
9c:d3:a7:4a:7b:fc:44:02:d1:c9:17:af:4c:80:3a:
20:8b:e4:fc:f9:24:1e:2d:df:0e:35:2d:15:93:ee:
07:eb:3a:a5:e3:e6:9a:9d:40:95:5a:44:bb:ee:1c:
89:da:e6:05:79:bb:4e:42:c0:98:1b:a4:8c:51:70:
1f:84:f3:c5:1e:1c:4b:6f:65:43:b6:80:1e:6d:1a:
82:17:61:9b:86:4c:9c:8c:ed:55:aa:e3:15:a5:97:
8c:82:01:79:02:02:b6:4c:93:7c:ad:29:81:f4:55:
b7:06:0a:f2:35:fa:ea:48:79:ec:a6:e7:cd:8b:0c:
6c:63:35:6e:01:de:75:16:87:88:a6:36:78:6e:32:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9B:6E:A2:64:43:66:0F:21:88:2E:EA:16:F1:89:46:B1:13:11:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/922a7821-890e-3cd6-a1c2-f6a156563ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
X509v3 Authority Key Identifier:
keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa28:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:72:28:34:e5:70:cf:cb:80:35:12:49:2f:4d:b2:83:c9:72:
e3:2a:d6:d5:73:b0:59:cf:b6:aa:d3:b4:16:8f:5e:3e:d6:07:
ca:48:32:0d:4d:ef:b6:0b:2d:77:b2:7e:41:48:c9:1b:89:1f:
c3:2a:1a:bf:a3:12:48:18:6f:26:a8:9c:7e:42:7a:ad:5e:52:
4f:d6:88:ac:f0:b2:bc:05:8e:f6:1e:35:ad:6b:b2:0d:41:1c:
1e:97:8d:f8:97:b9:b7:6b:d1:ed:38:bc:bf:81:ff:e8:e4:ae:
a3:ea:eb:38:f7:2b:72:69:0b:c1:bc:5a:b8:6e:8b:e8:8f:ab:
b1:d0:3e:4b:58:61:36:99:ba:6b:fa:97:a6:50:4d:e9:a1:8a:
12:80:2c:0d:c2:74:07:f4:9e:2f:3f:47:a8:10:bd:7f:3a:a0:
76:d5:37:4c:dc:3a:33:db:89:0e:4d:b0:a1:09:0a:ae:8d:0b:
b8:28:5c:db:0d:c2:9c:da:6a:4f:61:0c:a5:a2:03:cd:bb:53:
8b:0c:09:45:f9:0b:02:6b:30:1a:3e:04:a4:84:b3:01:14:89:
2e:13:ce:62:27:22:e0:67:76:2c:b4:4e:31:c7:af:cc:97:eb:
94:1f:ca:17:51:8a:ab:51:e4:fe:12:e3:1b:40:af:72:b5:3d:
99:d9:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:30 2025 by rpki-client