Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/a72f9e65-1207-39fa-8dfc-03758375199a.roa
File: a72f9e65-1207-39fa-8dfc-03758375199a.roa (raw, json)
Hash identifier: BzV1sz2b+wXOqtlByQkaQuP8bHJ7codTWqs49dut3so=
Subject key identifier: CD:27:D8:49:FF:AE:4E:11:35:45:51:C0:BC:B4:84:86:57:8E:9F:A8
Certificate issuer: /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial: 010D0C9F432858491273920A6CED57B4EF6FF640
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/a72f9e65-1207-39fa-8dfc-03758375199a.roa
Signing time: Tue 04 Mar 2025 03:31:14 +0000
ROA not before: Tue 04 Mar 2025 03:31:14 +0000
ROA not after: Mon 02 Jun 2025 02:31:14 +0000
asID: 63150
IP address blocks: 2602:f988:201::/48 maxlen: 48
2602:f988:202::/48 maxlen: 48
2602:f988:203::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:73:92:0a:6c:ed:57:b4:ef:6f:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
Validity
Not Before: Mar 4 03:31:14 2025 GMT
Not After : Jun 2 02:31:14 2025 GMT
Subject: CN=d71a0022-ce53-4599-875e-f323b7377801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:8b:64:08:38:36:4c:10:a9:82:7e:61:46:
a4:73:4a:fd:bc:0c:62:37:e9:9c:17:74:41:c0:8c:
bf:ef:ea:01:8c:dd:5f:84:10:b5:a9:95:2d:3d:67:
c9:3a:6d:3c:12:08:cf:ce:1d:b8:7c:48:db:91:14:
65:a1:aa:e4:f3:ed:59:b1:53:46:71:44:32:0f:97:
f3:53:86:76:ff:d5:c0:2c:ce:70:5c:24:cc:8f:75:
7e:7a:75:3c:3d:f3:d2:8d:8a:ae:ad:24:46:0f:6a:
fb:40:79:7b:0b:8f:72:d7:f7:55:1e:80:5e:c2:85:
99:fe:91:a8:00:7c:34:8b:91:f7:78:8e:08:83:f5:
93:d6:e3:67:ef:03:ef:96:27:e5:94:06:59:a9:fc:
31:49:b5:63:06:f5:f7:3b:f9:e0:a2:07:7e:36:d3:
95:4d:fc:e6:05:0a:14:b3:ef:60:22:0a:4f:a1:9d:
85:6f:43:0f:82:12:74:19:9e:49:44:02:ac:7a:db:
b3:e2:c7:10:ce:24:bd:d1:b6:f6:ef:b2:3c:73:3e:
df:62:9a:fe:d7:7c:f8:b4:d3:2d:86:42:ac:dd:25:
ac:4b:0d:16:ea:2f:ed:84:a9:f3:fc:0c:20:4a:ab:
2b:fe:72:09:d0:7d:4b:ca:cd:e2:fc:05:3f:1d:f0:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:D8:49:FF:AE:4E:11:35:45:51:C0:BC:B4:84:86:57:8E:9F:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/a72f9e65-1207-39fa-8dfc-03758375199a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
X509v3 Authority Key Identifier:
keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f988:201::-2602:f988:203:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f5:fd:ec:84:a4:d1:98:68:49:af:eb:36:44:bb:80:23:ba:
90:82:55:33:d8:14:24:1a:05:8f:42:91:1c:85:84:13:72:21:
33:9c:9b:fa:77:c6:9a:fe:39:64:f8:11:dd:60:08:13:75:8f:
fa:c3:c0:4b:72:7b:f4:da:6e:14:b8:c5:4d:2f:5d:f1:11:8f:
f0:fb:14:94:11:e7:c3:92:02:ec:44:53:e1:81:af:7c:cd:05:
9c:ea:97:24:b9:f4:32:72:54:55:45:1e:77:75:15:53:8a:02:
9e:21:bd:33:d5:57:14:fb:4b:39:e7:63:0b:62:9d:61:a0:81:
4f:fd:e2:9b:9f:30:dd:87:b6:e2:88:14:86:bf:57:c6:43:6a:
a7:4f:16:df:4e:42:48:f3:0e:b2:c4:bc:a9:69:d4:a6:f9:d8:
f5:2d:af:a5:7b:89:50:f1:77:b2:33:60:74:7f:03:3b:ec:d2:
0a:64:24:a9:f9:5c:40:79:53:5f:55:7a:49:b6:bf:80:46:e0:
92:7c:f9:80:60:6b:63:75:2c:40:85:ae:bb:d1:2c:b6:77:df:
76:4a:e9:02:d0:e3:4d:ef:1a:98:7c:59:c4:42:87:67:60:1d:
44:90:d4:e6:af:ae:71:bf:32:d4:f1:24:14:01:18:e3:03:7f:
ad:76:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:04 2025 by rpki-client