Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/4a833b8e-9e5c-3b4a-8005-11681384b4b7.roa
File: 4a833b8e-9e5c-3b4a-8005-11681384b4b7.roa (raw, json)
Hash identifier: 8xXJNhMvig/7NBwh6NR5RahPIdIsQwr2QyLQR5cYbLo=
Subject key identifier: 3B:3A:45:FE:49:27:20:AE:61:71:7F:84:EF:E6:21:0B:9E:B3:80:41
Certificate issuer: /CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Certificate serial: 010D0C9F43285848D6413053BC728769CBF46A80
Authority key identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/4a833b8e-9e5c-3b4a-8005-11681384b4b7.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 397423
IP address blocks: 2602:fafe::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:30:53:bc:72:87:69:cb:f4:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=f3926fdb-0a66-423d-a6d5-0ccce7292e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:7b:a9:61:21:e0:9d:28:64:bc:fc:dd:c1:
a8:f5:b9:b2:b1:58:16:9f:38:95:6d:51:b7:9c:ce:
e7:32:a0:da:a2:da:c4:c9:02:dd:6f:c7:f2:5d:4a:
0d:4b:e8:91:db:bf:9e:ee:08:f2:4f:e1:35:c0:f3:
cc:f1:f6:e8:7e:5d:4d:86:7e:ac:a5:53:ff:18:dd:
f2:fc:f0:91:24:99:74:5f:08:00:7f:51:ea:69:13:
f2:bf:63:f7:94:68:36:51:60:ba:ec:9f:ce:17:e8:
0b:f9:e2:cb:d8:19:72:dd:ce:2f:0d:13:84:8e:81:
52:e2:46:7c:10:3b:1d:7b:46:43:03:e7:da:25:28:
50:b5:1e:ab:f2:fc:48:b8:7c:08:e7:8d:3f:3c:64:
97:6d:e2:c7:13:69:2b:0a:e9:60:fc:4e:3c:5f:9c:
26:cd:16:13:00:46:92:6e:17:b7:2f:22:ac:7b:3a:
78:1c:c9:57:d1:5c:a9:65:1b:90:e1:fd:de:e1:49:
2f:36:6b:07:60:f6:c5:16:fc:39:c9:c6:f8:31:ba:
d9:67:45:4e:a5:0b:fa:7d:65:19:49:e5:7a:46:0d:
2d:0b:8e:2f:ce:08:f1:28:b6:0d:19:10:f7:57:66:
c5:be:f4:c0:28:0c:fd:3c:3f:85:75:f6:12:21:ef:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:45:FE:49:27:20:AE:61:71:7F:84:EF:E6:21:0B:9E:B3:80:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/4a833b8e-9e5c-3b4a-8005-11681384b4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.crl
X509v3 Authority Key Identifier:
keyid:ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fafe::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:8c:2c:2f:db:25:d4:a3:30:92:7e:5b:39:7f:42:47:1f:83:
82:c3:c1:aa:b7:ee:27:ed:87:12:44:40:76:10:8f:e1:0d:85:
ce:cb:52:8b:df:30:aa:43:60:c4:c4:cf:08:76:1d:11:06:3f:
be:9e:d1:ce:f2:b9:22:9f:10:27:7d:1f:82:c4:4c:ab:c2:06:
57:1a:a5:fb:de:d9:9c:0d:70:33:3e:75:38:9a:77:53:cc:8e:
de:35:45:21:a0:d7:b4:a8:5b:e9:26:72:d9:f3:97:c1:76:63:
11:12:e1:59:40:3d:9d:3e:9c:6c:ca:db:52:eb:6a:f2:e7:9c:
4a:06:7d:cf:cb:18:bc:63:7b:32:0e:84:7b:ca:5d:bf:ce:6d:
86:2c:64:b9:63:f3:8e:28:f9:75:18:4c:48:d9:ad:d7:b3:61:
a6:3a:b2:ae:37:54:6c:3f:90:9e:d8:0e:20:03:bc:37:0d:5f:
db:52:dd:5e:6a:ab:29:8e:ff:b3:2a:68:99:8a:94:a5:f2:87:
8f:b3:a3:2b:59:9b:97:e3:ef:a8:71:cb:4d:3a:be:99:53:d1:
e1:de:44:2e:14:10:c4:f2:e6:c3:f7:00:14:bb:e5:91:e2:39:
07:eb:da:0b:d3:3e:9f:0e:65:96:bd:1b:57:7e:00:c1:fd:17:
13:9f:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:09 2025 by rpki-client