Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1f31bd42-5f7c-37a7-b27d-5f80a483ea35.roa
File: 1f31bd42-5f7c-37a7-b27d-5f80a483ea35.roa (raw, json)
Hash identifier: y7aGG3LgX4awv0+DxKgTacNMqerJS93ocHf5rk/a3qw=
Subject key identifier: 6F:00:EE:5E:DB:53:24:D6:E7:61:1B:19:45:0D:5D:C4:BB:03:B4:94
Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial: 010D0C9F43285848AC60D6CF428F16CB2AA95600
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1f31bd42-5f7c-37a7-b27d-5f80a483ea35.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 29802
IP address blocks: 2602:f972:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d6:cf:42:8f:16:cb:2a:a9:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=2bc5b01e-641d-443d-adbb-109c1c03495e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:6c:55:bf:d7:84:65:46:af:f1:1a:8e:9c:
cc:f6:01:81:fe:72:b7:db:a9:ad:e4:e1:42:0a:74:
38:b8:a3:99:01:cf:63:a6:dd:90:9e:e2:09:63:4a:
22:66:eb:0b:43:a5:fd:05:0f:bd:df:a2:4c:d6:56:
a7:2e:e8:18:af:11:63:0d:9d:69:46:43:3f:88:da:
95:0d:2f:e9:ed:50:4e:af:ca:e0:06:cc:22:e6:03:
ee:b9:74:2f:51:b7:21:4f:d9:b8:38:0b:c2:0c:9b:
20:3c:3e:3e:4c:24:51:9d:6f:cb:93:a0:f4:e4:73:
73:fc:b5:ab:eb:ed:28:48:b1:bf:56:de:1a:b9:29:
96:52:b1:c2:e7:eb:48:6f:a4:01:51:ba:43:34:04:
ae:15:e9:6e:e4:49:71:1e:d6:94:52:1f:37:41:02:
1d:57:6c:10:16:23:2b:25:13:e8:95:3e:5e:53:a2:
82:40:b1:87:6f:41:d0:49:a5:b1:08:aa:4c:ea:b4:
a7:34:3d:67:ca:27:26:b3:a8:a5:c6:c8:15:9d:87:
f9:73:8d:c7:b4:8a:4f:e2:6b:c2:a4:e2:cd:6e:3c:
f6:d0:fc:d9:ee:74:c8:f9:63:0e:a4:d0:5f:37:fd:
37:46:fa:e4:60:3b:96:76:50:e3:4b:fe:16:c5:6f:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:00:EE:5E:DB:53:24:D6:E7:61:1B:19:45:0D:5D:C4:BB:03:B4:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1f31bd42-5f7c-37a7-b27d-5f80a483ea35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
X509v3 Authority Key Identifier:
keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f972:b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:0b:1b:79:14:f4:b7:3f:45:e9:5b:f4:95:15:78:40:8f:a8:
2c:2f:55:4e:b9:bf:21:3d:86:52:48:79:6e:d9:67:45:41:45:
0c:fc:37:b6:a2:a3:b3:a9:01:28:aa:58:8a:f6:56:39:18:b4:
06:14:92:53:5f:f5:6c:83:ce:11:3f:e4:d5:65:6d:3a:f5:72:
dc:34:b0:3f:10:4e:d4:73:d4:bb:e8:40:d2:4c:1c:e1:1a:9e:
89:77:30:1a:a0:27:6c:c4:81:fe:89:0e:9e:1d:ef:7a:0f:3a:
c3:79:01:fc:bb:84:05:0d:cb:88:4e:ae:c4:56:04:69:f5:dc:
15:4d:76:de:75:dd:84:c2:26:c6:c4:13:6d:1a:1d:91:09:d1:
53:96:18:f9:4f:5a:89:2f:82:8c:90:2c:24:0e:14:6c:40:58:
40:30:b9:41:de:9c:12:e9:d5:96:50:ff:2a:73:9b:f2:f5:fd:
9c:1e:87:10:56:4c:c9:3f:1a:5f:21:73:b3:31:fd:64:66:eb:
73:72:88:a1:c5:c2:a6:52:3d:20:c8:64:97:9d:d5:cc:48:ae:
45:f1:30:4f:e4:f1:4e:88:54:bc:eb:43:69:5d:21:25:e8:2a:
20:69:16:76:be:d3:ec:4c:04:35:e8:da:7b:db:e9:a6:7d:21:
0d:6e:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:46 2025 by rpki-client