Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/ded8873a-c1f1-31cc-90ef-d4b2f41913d8.roa
File: ded8873a-c1f1-31cc-90ef-d4b2f41913d8.roa (raw, json)
Hash identifier: 8MB5DzzFb7TQ3HfsXoZpwU+/vXU5fiFg1KoPlZWeLh4=
Subject key identifier: 04:F5:A5:27:39:82:C2:0F:EB:A5:E2:E6:0F:29:89:C8:6D:B7:27:34
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848F3113409B4932AE5461420F0
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/ded8873a-c1f1-31cc-90ef-d4b2f41913d8.roa
Signing time: Thu 20 Feb 2025 21:42:59 +0000
ROA not before: Thu 20 Feb 2025 21:42:59 +0000
ROA not after: Wed 21 May 2025 20:42:59 +0000
asID: 399970
IP address blocks: 2602:fc3b:d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f3:11:34:09:b4:93:2a:e5:46:14:20:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 20 21:42:59 2025 GMT
Not After : May 21 20:42:59 2025 GMT
Subject: CN=397fb6f2-b419-44e9-82b7-10bb16866ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:02:a9:43:78:5c:2e:7f:7b:48:1e:fd:9f:
52:a2:a3:0e:f0:26:ba:fd:b6:bb:8e:d0:25:22:37:
de:d1:77:66:79:81:1f:48:78:18:e0:a8:4e:b0:39:
47:0e:c6:b0:71:97:ab:09:2b:91:34:42:e4:5f:fd:
f4:8d:3f:c1:85:ef:53:2e:51:80:44:17:36:ff:d5:
b9:df:7a:31:33:05:6d:cd:46:91:8c:bd:53:80:ec:
c0:c4:83:d8:97:8d:65:27:2a:47:ed:75:b5:3f:7f:
93:9c:d4:f3:16:4c:01:aa:52:89:fc:36:2a:84:ed:
53:1e:35:21:9e:37:80:9b:16:22:d9:5e:8b:50:d5:
ac:85:ca:7f:b1:66:ee:2f:9b:4f:8c:1c:b3:b7:ce:
b6:14:b0:44:62:22:6d:c5:a4:47:8a:60:ba:c3:e9:
74:67:d2:a1:ea:c0:4b:7c:a4:19:3c:30:32:a2:29:
7d:3f:39:fe:3e:fc:13:28:c3:b7:cc:83:38:18:00:
8d:14:73:39:8f:0d:5e:83:46:b9:2a:58:97:6d:ae:
8c:48:c0:3a:0c:f3:28:c6:82:37:52:10:3d:64:9a:
7b:fa:a1:d2:64:b9:f2:05:a0:b1:31:53:b6:04:5c:
03:11:96:7a:ea:e5:bd:21:71:75:cd:82:aa:56:96:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F5:A5:27:39:82:C2:0F:EB:A5:E2:E6:0F:29:89:C8:6D:B7:27:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/ded8873a-c1f1-31cc-90ef-d4b2f41913d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:d00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:33:fc:75:e8:78:88:ce:9f:3c:d7:f6:54:e9:21:02:96:36:
ff:56:f8:28:91:e9:56:96:4b:35:ce:bc:c3:d1:70:7f:4b:84:
84:1e:31:d4:74:e9:e1:8a:8b:62:07:65:7c:51:c9:3e:c9:aa:
c9:af:3a:73:ef:83:b7:cd:fb:a6:f2:59:5e:39:da:5d:95:d4:
12:8e:bf:68:fa:d1:9e:38:2b:2f:ca:e5:08:c7:ef:24:ad:aa:
16:1d:14:8b:bf:27:ad:a8:77:d3:8b:f9:84:52:e4:b8:f4:07:
58:b4:fe:78:70:37:55:25:c4:0b:ab:28:3b:02:92:b8:7a:44:
92:53:6a:14:8c:ad:de:55:25:62:87:00:45:78:6a:0e:a8:aa:
ad:06:05:ac:91:2f:dc:b5:0e:5c:39:76:f2:e4:81:c4:44:5f:
dc:6f:59:32:48:fd:a4:77:3f:61:d5:df:fd:47:7c:e7:5d:5c:
6f:fe:3f:bc:d4:2d:2d:6a:99:1d:39:de:30:1f:e0:55:d3:4c:
68:6e:a3:59:b8:1b:ef:a8:f5:02:81:b3:5f:87:c5:2e:aa:fd:
12:cc:2a:92:d6:b8:13:58:f0:6b:3f:fd:cb:ea:4b:2e:e5:d5:
fc:b6:5b:cf:d9:af:a3:6f:7a:dd:d6:db:ac:a4:aa:41:d9:f7:
6b:f1:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:48 2025 by rpki-client