Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa
File: c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa (raw, json)
Hash identifier: LvJ8QYX4Tp1GnbdzApHK+V/Fxm3WcJrXdrnrfCo7+mU=
Subject key identifier: 38:5C:DA:BC:01:E0:A4:B3:25:3E:0A:FB:C2:6D:8C:C3:37:47:53:23
Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88
Certificate serial: 010D0C9F43285848D2113F0D6E28E41C730B1580
Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 398328
IP address blocks: 2602:fd46:137::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:3f:0d:6e:28:e4:1c:73:0b:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=b88ec7c4-4de7-4f36-8d39-a4a88aacfef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:88:61:11:c7:ab:4b:12:91:0f:01:4d:3d:
c7:59:18:86:e0:06:b8:0b:91:1e:8c:0c:91:a6:8e:
44:13:b3:5b:56:b5:61:a3:ba:8a:e4:72:ca:5f:71:
3b:e2:17:e2:39:b9:dc:ec:3d:9c:dd:22:bf:62:89:
53:33:22:f2:de:90:0f:cf:8e:74:8c:13:34:36:2c:
f9:52:9b:0d:fd:c6:1b:e2:66:86:b6:f9:4d:b1:15:
98:4a:0f:a4:76:3c:26:85:91:5b:f7:4b:3e:90:d1:
b5:2d:7a:26:63:be:af:42:ae:a3:3b:8c:72:9d:74:
42:8b:55:e5:ec:70:51:29:54:62:78:97:76:12:ba:
1c:c5:51:1d:a9:b0:04:43:31:b3:77:71:02:fa:5c:
4e:44:ef:f8:21:d2:4a:e3:94:56:d5:fe:3a:b0:c5:
b3:98:a1:b3:0d:28:83:1f:0b:d6:0b:51:15:59:17:
e5:4c:e4:ae:c8:79:bd:58:ac:4a:6f:91:7a:45:66:
01:79:2a:06:eb:b5:f5:ad:9f:db:19:54:8d:20:6c:
0e:d1:28:3b:6e:2c:40:04:3a:bb:9b:12:47:a1:fd:
b6:54:79:36:af:0e:42:e1:e6:e3:40:2a:e9:23:37:
80:3f:ee:8f:23:9e:c7:b1:fe:ea:19:8a:de:09:4c:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:DA:BC:01:E0:A4:B3:25:3E:0A:FB:C2:6D:8C:C3:37:47:53:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl
X509v3 Authority Key Identifier:
keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd46:137::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:55:5c:76:64:80:b5:04:98:dd:24:d7:f7:d6:02:05:00:4a:
d7:91:84:a7:97:cb:41:0d:52:a5:76:51:23:d7:c3:96:44:d6:
b4:80:55:cf:46:50:42:6e:27:37:3b:83:32:7f:2c:d0:9b:88:
b1:d0:b9:14:e3:e7:34:70:50:c8:43:ac:1f:12:76:19:ac:45:
a6:1e:5d:8c:82:f2:b4:54:85:43:65:4a:7b:fa:91:fb:af:ed:
26:c9:04:9c:f3:9a:de:68:d9:27:fa:9d:68:3d:bc:fe:5d:a8:
9d:fb:a9:3c:d6:bc:0f:b4:ca:ff:f7:76:a0:40:e8:1f:86:14:
54:f5:9c:fe:6d:87:df:10:e2:ca:e3:b7:47:e1:56:ba:a5:b8:
af:3a:c4:fe:79:87:72:cb:6a:44:dc:f5:e1:1d:da:e5:a7:16:
ea:45:5f:b8:c5:a1:fc:c6:a1:34:06:12:4f:68:39:36:4d:ed:
f4:1d:38:c6:40:ba:4a:11:82:a4:04:55:22:f7:45:84:67:b2:
24:4d:e7:81:c8:0d:7c:99:25:c1:f7:4d:17:7c:2a:2d:8f:a4:
3c:0b:ae:ee:35:92:bb:6e:6d:f7:29:7b:c8:c7:6a:80:17:7e:
cc:72:60:86:de:ce:bb:06:5c:31:d2:d2:78:15:6a:21:81:9e:
8d:ee:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:35:04 2025 by rpki-client