Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa
File: af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa (raw, json)
Hash identifier: CMjrIUvKTJlivU1leKqDaIgBkGYPQ1oxuksprT4GAZ8=
Subject key identifier: F7:1E:BD:13:29:EC:49:DA:18:EE:2C:9D:26:FA:29:1A:16:95:5C:26
Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Certificate serial: 010D0C9F4328584949FE8F28A9CA5489DB886F00
Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 985
IP address blocks: 2602:fb4a:a0::/44 maxlen: 48
2602:fb4a:b0::/44 maxlen: 48
2602:fb4a:c0::/44 maxlen: 48
2602:fb4a:d0::/44 maxlen: 48
2602:fb4a:e0::/44 maxlen: 48
2602:fb4a:f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:8f:28:a9:ca:54:89:db:88:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=33d198eb-0a66-4c46-b4a0-d1ef8f3e4b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:6a:92:93:d0:86:04:b1:51:56:6b:39:37:
56:a3:83:d4:32:b7:8e:da:01:80:8c:03:4d:5c:8b:
69:97:4b:d9:42:be:4f:1b:55:6a:b0:52:6d:0f:02:
d0:a7:30:4e:06:ba:0e:75:f4:11:84:b9:4a:ad:1c:
72:52:84:da:bd:76:70:03:21:ae:2d:d2:cb:f2:78:
05:7c:18:53:04:b8:b0:70:6e:98:9b:54:5e:f2:5b:
5a:09:89:9d:96:72:61:46:82:21:b9:3a:cc:a1:62:
b1:d1:67:d3:34:96:3d:35:55:c8:bc:36:7a:87:2c:
01:57:57:ff:80:3d:ed:ad:49:90:9a:7b:20:99:0e:
60:41:16:41:a3:29:07:8b:2f:86:82:9b:c9:6e:e9:
94:0f:ea:4c:e6:ea:84:70:e2:46:c5:70:22:de:36:
55:2f:bc:7d:d7:3c:c8:d8:ec:66:14:9c:5e:ec:1d:
af:7a:d9:fc:8a:3a:8d:14:02:5a:df:37:ae:fd:01:
1e:f2:05:52:86:26:17:8a:85:24:37:eb:ad:d9:81:
60:f2:b7:c8:92:22:16:23:38:12:64:7d:2c:6a:7d:
8c:94:59:95:2e:a1:3e:4b:ae:38:aa:45:ca:68:9f:
3d:ad:1d:4f:fe:bd:6c:7d:b7:5b:d9:0f:52:40:2b:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1E:BD:13:29:EC:49:DA:18:EE:2C:9D:26:FA:29:1A:16:95:5C:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl
X509v3 Authority Key Identifier:
keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb4a:a0::-2602:fb4a:ff:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ea:51:b3:55:56:ce:26:e4:44:d8:c3:50:11:30:d3:dd:73:
9d:be:c3:2b:d2:c1:f0:24:24:e3:9f:39:61:13:9c:ce:89:c7:
35:6a:5e:7e:f1:f0:3d:3e:8d:71:ef:ea:5f:ef:85:38:8b:bc:
0b:5c:d3:9c:48:95:02:5f:5f:ed:3f:cc:77:4c:d3:27:3a:c6:
99:6e:61:15:db:4f:ad:23:39:e0:1c:ce:4a:b8:a4:b3:44:8a:
12:74:83:f6:d4:00:4b:08:3f:f3:e1:69:87:18:be:93:5a:20:
e7:7f:b4:57:ae:55:f2:67:22:0b:f9:ea:3b:a0:6e:e6:ad:76:
88:c5:0c:59:52:39:ef:a7:48:cf:a2:07:68:d5:95:b1:15:0b:
5f:b6:98:be:14:df:b4:e2:6e:d0:b2:f4:91:e4:72:7d:3d:51:
44:fa:d8:59:be:9c:e4:45:33:39:25:cd:f1:c8:57:a2:4c:c8:
12:04:93:03:c4:a0:34:cb:2c:cb:cd:a1:19:02:8f:4d:ef:8b:
93:bc:0b:39:51:7d:a3:19:61:61:fa:66:46:ed:73:32:70:10:
19:87:27:5c:55:90:5e:dd:0b:26:0b:2a:c2:f1:34:81:76:28:
28:70:02:3d:d2:4f:85:b1:70:0b:0b:8b:be:9c:cb:f7:1e:d2:
99:ab:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:57 2025 by rpki-client