Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
File: 48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa (raw, json)
Hash identifier: i7Mwx/Y2tNQY/dGJ8/euQwbEiyDK3jJVTq1sw+jcpIg=
Subject key identifier: 9F:56:55:A2:15:69:A1:EA:59:BB:3E:12:BE:44:16:90:83:68:F2:BF
Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23
Certificate serial: 010D0C9F43285848D7A648F3F6415C488ABD7400
Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 57406
IP address blocks: 2602:29c::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:48:f3:f6:41:5c:48:8a:bd:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=8dae7470-7989-4342-b309-fc13cd0e7ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:75:82:ee:23:b5:f0:f7:77:60:51:5b:4e:f7:
80:f5:01:67:f8:6d:6c:c4:a4:d5:1c:d5:73:23:0b:
11:6b:5f:a1:90:9b:85:61:e9:6e:33:14:43:5d:75:
d6:75:18:7f:2d:56:fc:c6:fc:01:52:37:71:a3:4f:
7f:1f:bc:37:09:bc:23:86:18:a7:1e:bf:01:82:1a:
c6:c2:7a:a0:6d:57:23:fd:fe:62:5e:cb:82:2e:c2:
ca:72:25:f2:f4:eb:90:3f:7f:d3:0c:7f:d8:00:e0:
79:a0:f1:50:f8:5d:53:43:d7:c3:07:e7:2b:fa:fe:
89:e0:c7:fd:2b:db:a8:a3:b1:82:58:1c:d7:64:80:
26:4c:fd:45:75:af:49:71:37:39:4f:f7:c4:a3:6f:
14:d6:d0:38:36:25:78:61:8e:80:81:70:b9:0d:d2:
2c:a6:34:21:0b:99:92:82:e5:80:d7:83:a1:e6:4c:
f8:01:0e:c7:38:c7:91:48:18:c5:ec:38:a4:b6:1e:
03:1a:6c:5a:a8:7b:79:99:a1:5b:d1:81:d7:b5:32:
90:cd:30:e4:43:e4:20:34:19:4c:02:27:9c:a8:06:
5f:09:ab:b7:0e:45:c5:bf:0e:05:b8:51:aa:dc:40:
fd:79:4a:80:83:92:30:04:95:74:42:79:65:9a:92:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:55:A2:15:69:A1:EA:59:BB:3E:12:BE:44:16:90:83:68:F2:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl
X509v3 Authority Key Identifier:
keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:29c::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:6f:73:55:03:22:74:a2:66:bd:ca:ce:3d:91:ab:98:42:4e:
9b:65:eb:77:ed:a8:b2:d4:c5:7d:7c:94:33:14:45:37:e6:59:
82:ac:a6:66:be:4e:c1:ed:d9:1c:38:07:24:b4:c8:61:50:54:
a3:1d:b7:aa:44:cd:01:33:a8:a3:db:0a:a1:25:3d:41:ec:df:
3c:e3:4d:f4:a8:29:a3:c2:90:2f:8f:21:75:b4:53:54:4f:36:
95:22:24:53:1f:0a:57:e8:b7:19:9c:16:cf:05:13:13:65:f5:
6f:9e:33:99:70:e3:e5:c5:1b:bf:47:cd:49:83:c8:ae:5c:6b:
05:28:36:d3:c2:63:1b:8a:43:05:08:ac:cb:5a:7c:24:98:8b:
bf:ff:8f:cc:ca:c4:00:ab:31:b8:d6:47:56:57:cb:36:0d:e0:
86:04:55:a7:a1:33:98:9e:d6:01:c0:ae:cd:be:d8:90:95:09:
e3:95:71:07:2a:50:78:19:ce:a7:c4:26:3e:1a:80:ec:23:13:
29:3d:e0:96:f0:67:6b:73:09:1f:e4:e2:69:8f:4d:91:38:6d:
bd:c0:50:fb:98:e0:49:41:b0:6d:28:04:c9:bf:70:2e:d3:49:
07:33:f6:20:2f:6e:0b:ba:36:cc:a6:78:4a:37:ec:55:07:25:
25:ff:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:15 2025 by rpki-client