Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa
File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json)
Hash identifier: KNVMZJVM9WBszXjWBt/JkJjfC2HhGZ0DP73BfAsjN/k=
Subject key identifier: 33:A8:6C:E1:50:DA:A5:82:3A:F1:1F:D5:51:8E:92:9F:54:06:B5:B6
Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b
Certificate serial: 010D0C9F432858492CB20DDBD254207EF664AC00
Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 32140
IP address blocks: 2602:806:f000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:0d:db:d2:54:20:7e:f6:64:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=830a16a7-6dd7-42dd-9c3e-b624707f5cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:1e:24:4b:e9:34:21:6e:cd:5b:6c:46:01:
5a:8d:9c:b7:35:3c:83:78:ce:14:7b:91:74:d1:52:
8b:67:17:fa:99:cc:f5:09:d2:6f:ac:06:aa:f2:d1:
e1:9e:98:d1:0d:3e:c4:ab:01:86:18:55:c5:29:04:
76:01:10:89:f5:8d:b5:6b:0e:51:35:70:02:f2:c4:
aa:9c:ee:7c:5e:8e:97:3f:cf:16:21:e4:58:5b:b4:
d0:63:7a:ae:0a:de:ab:ae:bc:f3:4d:50:a9:11:c6:
cb:a0:4f:d0:b9:21:c1:01:cf:47:86:84:b1:ba:c3:
09:71:49:9f:50:27:a7:0a:50:be:52:25:9f:57:a8:
ba:84:c6:14:d0:c0:d7:92:d4:b3:c4:ea:21:de:43:
14:02:86:9c:54:00:15:e3:c4:a7:9b:51:45:53:55:
c8:2b:ae:3a:98:63:b3:fc:4e:6c:12:6b:10:24:48:
ab:50:3c:f6:74:85:95:df:99:c2:0d:3b:ba:8c:aa:
3e:1e:f7:fc:1b:c9:b3:81:65:a2:66:46:ef:ca:36:
b4:0d:e5:1b:93:2a:29:8b:c2:ef:ea:e6:ca:fc:97:
b7:4c:f4:ec:fb:1f:26:61:4b:c1:25:d0:46:c3:13:
01:e2:ea:1e:8a:de:07:a0:39:e6:49:57:03:c8:a3:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A8:6C:E1:50:DA:A5:82:3A:F1:1F:D5:51:8E:92:9F:54:06:B5:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl
X509v3 Authority Key Identifier:
keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:806:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:ed:f3:02:51:d6:83:21:94:38:9d:69:84:3c:55:32:98:69:
cb:4a:2d:db:e3:ed:3a:8c:43:1b:80:f7:6a:d9:54:5c:40:26:
71:67:f5:ee:bf:a2:0a:8b:06:2d:20:0c:0d:c3:48:0e:5d:29:
95:4a:bd:02:f3:99:08:b8:5b:05:45:4f:25:7b:16:9d:26:51:
1b:10:13:a6:58:83:ba:03:16:0a:27:7c:55:80:1a:eb:d2:ac:
75:eb:43:c2:cf:28:87:93:bf:6f:0e:1f:93:47:39:63:5d:1f:
8a:ab:8d:5f:35:8b:f7:89:ac:0b:17:09:5e:58:27:b8:62:1b:
81:c9:d2:1d:ca:cc:a5:58:0b:33:36:fa:d7:7c:63:59:bb:92:
dd:13:75:c0:25:48:8c:96:b7:ba:4e:eb:20:f2:34:40:7f:c1:
0a:96:42:bb:bf:72:f4:87:6f:4f:c0:42:6b:98:bf:f1:4e:d5:
9d:e5:98:45:36:85:8d:e1:cc:f1:8d:5f:cb:bf:22:29:dc:27:
f7:df:cb:cf:10:ca:2b:9a:48:db:7e:3c:9a:0e:e0:0e:89:b2:
6a:16:ae:db:ea:ff:74:47:66:a4:f2:57:dc:80:6a:97:5b:cf:
61:06:f5:70:c7:54:47:86:2d:20:e8:6d:f6:8a:d2:49:ce:66:
d9:ff:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:36:26 2025 by rpki-client