Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa
File: 30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa (raw, json)
Hash identifier: uH8yGyr3L8Ph4aqnd0bGgZA05zbuWJT3Ga8iPPJqU4g=
Subject key identifier: 45:C5:93:A0:41:A4:A7:54:F0:E2:E0:4C:0C:81:3D:AD:0F:94:E6:71
Certificate issuer: /CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Certificate serial: 010D0C9F432858494B640D4CA86B4399136ABFB0
Authority key identifier: 51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 988
IP address blocks: 2602:fb4b::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0d:4c:a8:6b:43:99:13:6a:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=059b4bdc-21e5-4162-8134-9e391793da70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:89:d8:02:1d:cb:29:34:d1:e4:c5:09:db:
44:72:e2:c3:8e:3a:3e:03:8d:3b:76:4c:12:ce:b7:
7e:f5:84:50:71:34:2d:f1:54:24:f8:e8:56:db:0c:
47:85:a5:57:8b:24:1a:00:41:d1:f7:f3:03:42:aa:
bf:ef:78:b5:d9:88:e2:18:0a:a6:0f:57:99:59:c0:
ed:de:3d:1c:74:80:68:48:10:80:23:37:4d:c3:cb:
29:6a:55:10:a5:b2:a3:d3:07:86:74:6c:d2:a9:6f:
5b:55:0c:16:4f:01:37:70:fe:cb:63:a4:97:8c:93:
a6:ad:cd:dc:ee:49:4a:06:5b:7f:27:82:18:00:b2:
28:b1:e5:e0:39:c2:4a:c0:31:08:51:89:2c:ba:51:
f0:e1:19:57:36:b5:63:29:e5:0c:4d:ab:b7:f4:63:
cb:6a:b6:e9:e5:02:5a:79:8f:3c:4e:35:ab:97:ca:
4e:33:47:40:59:56:a4:db:3e:02:ed:2a:81:b2:80:
05:b3:79:23:00:0f:94:5b:94:61:b6:f6:dd:a2:87:
bc:39:56:e3:0d:6c:00:57:65:8b:a8:27:7e:40:b7:
43:fa:af:69:af:7d:26:67:ee:3f:f8:01:bf:6b:df:
9c:38:98:e4:59:15:48:c5:3f:95:35:36:80:c5:39:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:93:A0:41:A4:A7:54:F0:E2:E0:4C:0C:81:3D:AD:0F:94:E6:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl
X509v3 Authority Key Identifier:
keyid:51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb4b::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:47:1b:4d:5b:2a:f7:78:ae:29:36:8b:16:9b:7f:88:f4:32:
40:2d:50:b9:08:7e:01:8e:51:4e:b0:1c:05:b4:72:76:7f:05:
5d:7a:8b:f6:57:3a:04:ab:89:7d:bc:96:da:94:6d:5d:23:0c:
cf:2c:5b:79:54:04:7e:d8:df:81:51:d5:59:bf:41:e3:58:c6:
c4:35:1b:6f:dd:cf:79:3f:5b:4b:40:a9:62:a5:1b:3b:0e:2f:
32:bc:b6:a7:20:13:f6:08:bb:d3:1f:48:44:cb:40:55:44:15:
ac:77:58:4f:5c:6f:e6:68:c8:f1:96:38:50:dd:82:e4:2e:92:
1e:de:d9:9b:40:ff:67:8e:d9:53:51:ed:43:6e:0d:06:4c:16:
67:91:5c:1b:d1:22:56:4e:d8:af:3c:2c:47:da:fa:e7:9e:1e:
0c:bf:18:ff:32:3d:9b:a2:e9:80:1a:2e:c7:51:88:91:c3:d6:
95:11:cb:3a:61:85:20:35:63:1d:1e:2d:49:dc:24:08:21:89:
37:60:31:ba:ac:26:a0:72:b5:ff:c0:03:c7:ca:7f:9f:c8:08:
2f:8f:62:0a:5d:a3:df:7b:06:e0:65:fa:d1:01:48:30:dd:83:
76:e3:36:fe:6a:cb:bd:ea:bd:fa:41:d8:03:df:c3:14:95:c8:
00:23:ba:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:32 2025 by rpki-client