Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/a79e4587-f031-32d5-8b55-e7d6d90ffac4.roa
File: a79e4587-f031-32d5-8b55-e7d6d90ffac4.roa (raw, json)
Hash identifier: F+IDlbQpQtsnXRmob5s5d3klRj8wZWviuWECIa0lils=
Subject key identifier: FE:B5:75:82:2E:DB:13:08:A9:79:71:34:EE:8A:E1:0B:11:6F:A4:6F
Certificate issuer: /CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
Certificate serial: 010D0C9F43285848116FBC09397B77E61FC50AC0
Authority key identifier: C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/a79e4587-f031-32d5-8b55-e7d6d90ffac4.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 150698
IP address blocks: 2602:f969::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:bc:09:39:7b:77:e6:1f:c5:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=bb4421df-767f-4563-b6dc-ed0b8b198a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:7f:05:21:6f:f0:5f:5b:2a:9c:fe:60:a9:
c7:e4:53:8e:74:3a:11:fc:5f:ca:a9:a2:ce:2f:a4:
f8:0e:6d:aa:66:34:ed:e5:94:d9:2e:7a:06:c9:5a:
ba:47:8a:05:ae:5d:99:50:d1:dd:ee:02:d3:0d:24:
82:54:97:0c:86:fd:65:17:ec:23:28:62:1e:56:fb:
64:4b:27:c2:93:b2:a0:34:c2:30:8b:65:04:5a:58:
5c:05:a0:ac:6c:0c:0a:e2:60:59:b7:ec:8c:60:48:
fc:76:b1:d3:0a:f7:ee:dd:61:a0:8e:48:15:23:48:
b9:6c:aa:3b:bc:7d:ce:b0:48:09:b5:d7:71:74:e8:
c0:e4:09:8c:01:b9:3d:1a:e0:9a:3d:11:bb:44:e1:
1e:19:03:34:63:74:21:01:66:f8:1a:19:4d:c8:17:
73:03:27:d7:21:eb:95:f0:ce:b7:68:9a:05:f4:f0:
b6:c7:bf:f5:22:22:1a:a8:61:75:2d:12:a4:12:a3:
18:ab:18:25:00:44:13:e5:e2:c7:90:d3:98:fc:6a:
0e:91:9c:dc:37:fe:3f:d4:11:4a:ab:01:a7:02:9f:
fa:23:41:02:9d:3e:c0:1d:0c:fc:eb:5d:06:47:52:
c2:10:85:09:0d:1b:07:f3:1b:6c:74:96:01:22:71:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:75:82:2E:DB:13:08:A9:79:71:34:EE:8A:E1:0B:11:6F:A4:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/a79e4587-f031-32d5-8b55-e7d6d90ffac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl
X509v3 Authority Key Identifier:
keyid:C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f969::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:fd:d6:42:30:71:a3:37:93:1f:ec:b8:35:86:4b:31:a0:cc:
7d:cb:d9:3c:34:89:4b:87:4e:23:43:c8:4e:09:de:eb:66:38:
ac:37:f0:a3:1a:cd:a2:14:3f:85:6e:46:45:bd:43:bd:35:44:
19:f6:d0:f8:66:ed:17:a9:22:29:f8:66:24:bc:13:0a:dd:dd:
f1:5c:19:78:77:9c:36:05:97:c3:86:5f:b9:21:8a:ac:bd:fe:
39:d1:9a:4f:15:8d:9e:a7:40:22:1c:6b:f0:af:80:43:f1:cb:
ed:2a:3f:59:3f:85:de:93:6b:e1:16:67:c0:60:98:4d:83:e1:
3b:14:f6:17:84:d8:ae:b1:ec:4c:b0:52:9a:33:d4:ec:87:65:
73:ab:6a:7c:5c:2f:56:df:33:af:5b:5d:b0:dd:4f:b9:af:90:
16:0a:38:dc:a4:cc:02:3e:db:44:ad:80:96:c6:f3:40:49:eb:
3e:ae:44:bd:60:58:3b:fb:11:60:e4:5d:f7:f1:a7:b2:79:3f:
2f:d9:d0:45:d1:cb:59:3b:47:1b:b0:58:30:3a:54:05:5c:9e:
c4:2f:21:82:69:61:7e:78:af:76:fd:0e:ce:5d:5f:7b:6c:d3:
ce:0a:3a:1e:be:56:f9:19:38:39:9a:cd:31:4b:32:45:6d:82:
8c:39:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:01 2025 by rpki-client