Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/8b6c9930-a4a4-39d9-859b-fc75e132527a.roa
File: 8b6c9930-a4a4-39d9-859b-fc75e132527a.roa (raw, json)
Hash identifier: 42mzME2dRAfg/lNIdm5Oj+ZXxf+kCGCogeSfVdDO9EA=
Subject key identifier: 7D:73:69:B9:7E:D7:FA:15:D3:21:9E:08:20:DB:42:8C:75:66:4C:48
Certificate issuer: /CN=42001a2b-1b4b-4d19-8600-8744ad8103d8
Certificate serial: 010D0C9F432858488AE090D7200160BA38A4FC80
Authority key identifier: AB:52:0D:F3:47:04:A1:92:CA:DA:8A:09:13:88:46:AB:B0:76:89:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/8b6c9930-a4a4-39d9-859b-fc75e132527a.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 400598
IP address blocks: 2602:faf9::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:90:d7:20:01:60:ba:38:a4:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42001a2b-1b4b-4d19-8600-8744ad8103d8
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=888e73d7-72aa-4556-9320-4b403a536647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:d3:8d:a4:00:ed:90:ec:66:09:64:f4:55:
c6:fa:ff:84:57:8c:cc:2c:12:44:4a:02:bd:49:5f:
6c:27:66:9b:19:d1:1a:ee:38:ea:61:aa:d4:7f:c8:
f6:29:55:68:c2:a5:86:6e:2d:c6:db:9c:ea:9e:25:
d8:45:7c:32:1d:26:57:2d:dc:23:41:55:3b:90:1b:
fa:3f:ec:38:c7:87:40:37:3b:fa:df:65:05:59:89:
d5:9d:be:f6:c2:d1:0a:6e:bf:96:12:09:36:56:80:
a2:9a:1e:0f:d3:90:61:5e:2e:f2:bf:be:9f:d1:37:
c7:11:6e:e8:11:b8:f9:ba:ca:5d:05:dd:88:cb:8b:
13:ac:f3:ab:4e:30:32:5b:e4:7b:46:08:fc:08:31:
be:ad:04:bc:ff:01:c1:80:b7:f1:45:9b:60:7e:e0:
90:fe:43:37:94:1b:68:9e:2f:8f:58:40:6e:3d:a3:
89:db:1c:bb:0e:08:fa:1b:19:89:84:ad:98:a1:77:
83:75:36:78:42:20:d4:db:72:b1:ec:34:27:19:64:
0f:38:50:60:92:34:7a:67:4d:f3:0a:2f:a0:67:33:
f0:35:31:f5:95:47:ed:3c:03:eb:0c:48:c0:1c:10:
90:c6:f0:a8:3d:ae:bf:d1:64:00:ac:f8:f7:b3:03:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:69:B9:7E:D7:FA:15:D3:21:9E:08:20:DB:42:8C:75:66:4C:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/8b6c9930-a4a4-39d9-859b-fc75e132527a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/42001a2b-1b4b-4d19-8600-8744ad8103d8.crl
X509v3 Authority Key Identifier:
keyid:AB:52:0D:F3:47:04:A1:92:CA:DA:8A:09:13:88:46:AB:B0:76:89:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:faf9::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:83:85:79:9a:6e:1b:ac:b4:fb:56:01:fd:d6:0c:d6:f6:ef:
aa:cd:65:1e:0b:03:c5:a7:47:1e:6e:07:16:72:cd:e4:23:23:
fa:7f:2f:11:55:35:10:37:b3:29:0c:73:23:28:b9:e4:09:a4:
d9:d3:68:83:09:55:0f:c9:74:e8:05:3b:0a:4e:41:0b:cd:a9:
c6:96:91:74:c7:b5:62:91:e2:8d:00:ab:bc:85:33:f7:c5:8c:
ce:1b:45:e8:6d:23:f0:1d:6f:be:2e:44:21:4a:95:ee:ff:7e:
b7:ff:d0:b5:87:13:28:a3:d3:e0:7a:65:84:9b:50:32:55:42:
fa:61:67:30:b1:70:98:fc:92:b8:47:6a:47:66:a2:18:05:9b:
9c:81:c5:2d:00:fd:53:b3:95:4e:c7:2b:4c:a3:67:75:87:26:
fa:22:86:10:cf:f3:5c:84:ce:bd:c3:f8:ae:85:41:65:fa:a2:
89:5d:6a:79:13:2a:25:55:f0:06:37:e7:df:3e:64:b1:5d:2c:
3b:92:c1:05:ec:82:1d:e8:e7:56:9c:18:95:58:d4:80:e6:d7:
da:b0:0a:0a:e2:17:7f:82:ca:9a:3f:6a:be:ab:8d:05:05:04:
63:b5:9d:51:1d:6e:cd:db:5a:e9:e1:0b:88:8a:a4:54:5c:a6:
98:46:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:33 2025 by rpki-client