Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
File: c8b738ed-fedf-3c78-8f42-d6417729ca05.roa (raw, json)
Hash identifier: lMNEnIlXN6F/RqGBxEfN1koc35O4iq8vrUocpIJNilw=
Subject key identifier: 68:9B:4F:64:8C:58:93:94:9E:5E:99:05:16:E8:83:F1:27:74:AD:1A
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F43285848D21138906B983E33B3DABB40
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 206216
IP address blocks: 2602:fb54::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:38:90:6b:98:3e:33:b3:da:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=9497c86d-3668-4378-915b-850ba4394749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:f8:92:66:6e:4a:a3:53:f5:9d:c1:99:c9:
36:6a:2a:d2:35:72:d7:22:04:0e:1d:04:ec:8d:a2:
a7:d6:2b:9d:57:64:05:f2:e8:c7:ab:33:29:a4:54:
44:56:fe:d7:a7:dc:72:d5:12:87:a3:03:3a:22:6c:
f2:1a:71:ac:bd:64:3d:ed:fe:aa:81:ec:04:14:dc:
2d:26:be:2c:44:82:b8:6b:bc:58:ab:82:9f:8c:b5:
f8:34:41:4f:bd:e9:0c:50:f8:22:67:5b:cb:ca:1b:
25:cf:c1:2c:cc:21:b6:cd:37:8f:e7:3d:56:a3:73:
94:31:14:6f:f0:90:aa:48:da:bf:a9:ef:cb:19:75:
d7:62:1f:5d:cf:17:b6:dc:b9:e6:21:bb:43:cd:14:
85:92:7f:3e:93:d9:42:97:65:02:30:37:2b:42:f0:
17:d0:6a:db:fa:34:a4:6a:06:77:68:f6:76:54:54:
28:08:49:46:cb:ac:5a:76:f7:c1:63:c3:92:c9:01:
b0:8a:89:d2:0a:99:1d:45:25:63:d3:ac:fd:c5:a4:
f8:51:5b:49:5e:f8:fb:41:99:a6:06:03:d7:eb:18:
29:23:c4:71:73:9b:33:ec:23:a7:59:47:07:03:74:
db:3c:74:63:ad:f3:6f:f6:4a:9d:64:96:dd:3f:d6:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:4F:64:8C:58:93:94:9E:5E:99:05:16:E8:83:F1:27:74:AD:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb54::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:b7:88:45:31:40:33:ef:57:3a:1c:1f:b1:42:47:b2:14:34:
70:fa:f9:7a:ec:da:56:7b:ac:b8:6d:60:e6:29:fe:14:ea:43:
bb:8e:5e:01:9e:84:ee:9f:10:20:08:56:ed:86:42:ea:1f:e6:
50:f8:40:f7:f7:91:ee:1a:99:f0:19:af:a1:9b:7a:64:d5:64:
07:36:86:74:3d:16:45:67:7e:76:0c:a7:42:9c:85:2c:f1:09:
b6:8d:c6:36:35:9c:6b:e4:25:a1:96:f3:f1:79:36:bb:ff:64:
3f:e9:a9:22:98:0b:d3:64:3b:2f:42:49:42:63:67:a4:2d:5f:
d1:5f:1b:90:ef:94:d4:d2:57:8b:d7:f9:42:8f:0b:4b:0f:38:
67:e0:06:3b:1e:97:f3:f8:2b:d0:d7:aa:77:a1:14:3e:f5:72:
fc:95:85:32:6c:2a:de:34:36:07:c9:c4:45:93:21:73:4a:a1:
4d:1d:d9:5e:19:c3:c1:30:c3:15:a7:52:f1:6b:b4:71:d0:7b:
50:b0:50:08:af:a8:09:4a:a8:2e:15:05:a1:b6:31:2a:84:17:
e6:20:ce:8e:aa:f4:6c:69:c3:66:b1:98:c3:b5:db:49:eb:ff:
5e:81:1c:ba:7b:98:21:bd:74:94:25:9b:99:e7:03:c1:8f:cb:
7d:4b:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:37 2025 by rpki-client