Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/9905eab3-745a-321c-9317-54991c0595d7.roa
File: 9905eab3-745a-321c-9317-54991c0595d7.roa (raw, json)
Hash identifier: MLA+ERL7/qgHNP4Np7pPtEtfH7LD3d9j1KwdWpLrK8k=
Subject key identifier: 4A:1D:A2:F2:CA:D5:1F:04:67:F0:AA:70:78:81:07:60:53:FA:9E:44
Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Certificate serial: 010D0C9F43285848CC7B899BD12958B73312EEC0
Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/9905eab3-745a-321c-9317-54991c0595d7.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 985
IP address blocks: 2602:fb4a:80::/44 maxlen: 48
2602:fb4a:90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:89:9b:d1:29:58:b7:33:12:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=a0e67174-4725-45cf-b488-5d6dccd54429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:b7:16:88:0b:d0:b0:3d:3b:fa:c8:99:d5:
2d:bd:6a:b2:1d:49:9b:39:e3:77:50:94:00:77:ff:
fe:87:1d:03:c0:11:f8:5b:db:2c:2d:90:28:a1:72:
e6:e8:bc:3c:99:85:a8:cb:67:a7:63:f5:30:7c:b6:
31:bc:be:74:6e:7f:ea:1b:25:47:79:94:c3:0f:a5:
6c:e8:68:2c:77:a5:e3:b1:9d:55:49:50:50:91:75:
88:5f:77:be:bb:18:c8:05:40:bb:2f:77:bc:b9:da:
ba:df:b0:fc:ad:a8:7a:38:01:35:81:57:73:e2:90:
9c:ba:a9:01:da:c8:5d:1a:cf:d2:5c:8d:34:96:81:
2a:c1:80:93:3d:13:1f:4f:27:ec:9a:29:2b:80:f6:
83:23:f5:98:9b:64:b1:1e:ad:06:bd:22:ae:41:96:
f1:eb:48:03:6e:31:62:07:b0:2c:b6:fe:f2:bc:6a:
5c:46:6c:a9:11:97:ed:b8:3d:24:08:39:9b:32:67:
ec:3d:fc:e2:f9:0f:5a:98:11:c3:b3:b1:cb:85:4e:
52:c5:b8:2f:d7:86:73:2f:67:3f:4b:fb:16:cd:8b:
8a:a3:aa:1d:2b:b8:07:c7:ac:e1:7a:50:e9:8d:ce:
cb:fc:82:85:b1:29:5a:f8:78:53:01:32:c9:7a:81:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1D:A2:F2:CA:D5:1F:04:67:F0:AA:70:78:81:07:60:53:FA:9E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/9905eab3-745a-321c-9317-54991c0595d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl
X509v3 Authority Key Identifier:
keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb4a:80::/43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:95:e2:1c:29:78:8f:99:42:12:67:87:6c:72:45:ac:2a:20:
61:10:a5:83:3f:da:2c:23:01:99:79:c1:fe:16:c9:aa:65:32:
13:4a:ee:db:65:f4:31:35:06:eb:da:22:11:01:20:f9:31:c9:
c6:58:65:71:51:ea:6f:ab:e1:b1:e9:24:b3:2d:cd:93:e3:4f:
f5:11:04:10:23:b3:03:b5:8f:05:27:78:d2:d4:a3:cf:ef:2b:
2a:f6:df:fe:b2:44:b9:01:92:f5:69:27:ac:0e:45:48:f7:f2:
07:7f:64:4a:97:e9:c8:62:e5:a9:5f:e0:7b:12:a4:1d:5b:96:
ed:ea:92:56:e5:94:e3:78:65:5e:f1:b8:46:75:87:76:2a:59:
36:ef:de:f7:7b:93:1c:80:bf:be:f9:0e:bb:a0:0d:b4:1b:b7:
c4:cf:93:48:fc:fc:4e:d2:dc:ba:4c:a0:cd:f7:a1:26:07:b8:
80:1e:fa:00:c9:d7:8b:22:bb:2f:ea:92:96:b3:3c:9f:2b:ba:
15:fe:20:ea:1d:73:65:25:6a:19:7b:89:3d:cc:72:30:56:8a:
21:44:3f:fa:3c:15:6d:59:39:22:ac:79:ec:16:2e:36:a8:e2:
de:bf:39:1c:c2:79:7b:1d:c4:33:3d:77:e1:36:15:e4:0c:77:
e4:2b:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:40 2025 by rpki-client