Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/886a5ab4-c808-3689-b626-09e4a20d87e0.roa
File: 886a5ab4-c808-3689-b626-09e4a20d87e0.roa (raw, json)
Hash identifier: ocKfoNnCbeo0JwQcZos7T3Y2nsg7zfcomZ5nWgbiBC0=
Subject key identifier: B6:2A:51:55:5E:2D:89:92:E2:F0:4A:54:57:D6:15:E3:01:F4:0B:2E
Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial: 010D0C9F432858493C0931911A00F9BA14D4C980
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/886a5ab4-c808-3689-b626-09e4a20d87e0.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 396416
IP address blocks: 2602:fb78:20::/44 maxlen: 48
2602:fb78:30::/44 maxlen: 48
2602:fb78:40::/44 maxlen: 48
2602:fb78:50::/44 maxlen: 48
2602:fb78:60::/44 maxlen: 48
2602:fb78:70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:31:91:1a:00:f9:ba:14:d4:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=968748b9-59ff-411a-bb05-e18d27f61990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:24:20:94:b2:e6:fa:ef:ea:78:45:8c:da:
37:26:32:31:bd:6d:be:75:cb:a6:06:a3:43:2e:79:
2e:50:10:99:73:a4:37:bf:fc:cf:b7:55:4e:20:47:
34:a9:04:2b:45:fc:f4:5a:c1:57:6d:da:57:28:94:
ce:78:5e:a1:b5:ea:47:ef:f6:78:a2:0d:fb:7b:ca:
2a:c5:ed:dc:d1:47:99:c7:f2:b4:6b:74:52:59:1d:
0e:de:be:1f:a2:f0:31:13:d6:e3:df:87:88:01:be:
b4:99:a0:47:16:87:b1:9c:82:d2:6f:e0:d3:c8:7d:
95:b2:08:6e:80:ca:89:31:53:c3:00:64:c7:d4:88:
4a:3c:1e:90:5b:28:ea:70:08:2f:3d:6b:78:64:f9:
4e:b5:d6:31:2a:ff:9b:09:83:5b:63:f9:e5:a1:52:
14:00:f9:9e:98:c7:da:3c:92:94:fc:e4:e1:2f:ff:
1d:61:61:19:71:a1:11:30:7a:3a:76:d2:84:a1:45:
0c:12:3d:bb:d7:fc:97:ad:bc:e3:6f:c9:0e:ae:cf:
21:ce:4c:6a:af:85:d5:89:26:4d:f8:8f:30:83:fb:
0a:4a:d2:27:1c:0f:0b:0a:10:55:53:fa:d5:bf:92:
70:cb:be:c3:02:24:2f:0c:e6:7f:e7:df:4a:cc:98:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2A:51:55:5E:2D:89:92:E2:F0:4A:54:57:D6:15:E3:01:F4:0B:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/886a5ab4-c808-3689-b626-09e4a20d87e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
X509v3 Authority Key Identifier:
keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb78:20::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:b8:77:bd:b3:8c:45:11:1a:f9:26:f0:eb:39:a2:cd:2c:a4:
68:19:2e:c5:cf:a0:1b:62:c9:cd:f8:20:3f:31:27:e5:bc:37:
17:17:8d:47:fa:2d:31:26:bc:e8:68:b1:ed:68:e2:d0:57:ac:
9b:6d:73:7a:d1:fc:c0:b0:a8:94:f6:de:f4:2a:a8:b4:6c:41:
f1:18:aa:28:69:4d:02:65:a1:79:0f:1a:09:12:bd:b3:8d:56:
aa:31:e3:5d:d5:ef:2e:7b:56:34:f7:54:1e:cd:f0:d4:a3:81:
59:e0:88:28:06:38:5f:09:cc:b5:ee:b7:26:84:3d:49:ef:95:
a0:69:e3:c2:bf:dc:9c:f9:8c:39:6c:6c:62:f7:23:ef:57:a0:
9b:7c:21:73:4d:80:45:60:5d:a2:dd:8c:3e:70:9b:06:d4:f9:
a4:4f:88:04:2c:dc:54:20:e8:38:ef:a8:36:ba:58:40:eb:1a:
bc:cc:bb:6c:cf:79:25:ec:a4:fe:1c:bf:b3:67:09:2e:d0:8b:
16:4b:62:09:96:0d:1e:6c:97:95:22:db:d4:b1:d3:a5:6d:16:
c0:5b:bb:2e:56:c5:16:d8:2f:a5:19:06:cf:92:e1:37:f4:12:
4f:db:96:3a:eb:48:de:65:cd:5d:a5:07:a3:20:48:f0:0f:1b:
d0:fc:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:05 2025 by rpki-client