Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/46bad2fa-2d2f-3bb1-8326-6ba50ba5be9e.roa
File: 46bad2fa-2d2f-3bb1-8326-6ba50ba5be9e.roa (raw, json)
Hash identifier: 1gP+eBIdTZ263sMGv0zSOJOZqZMwFiwogn206VC8ZmQ=
Subject key identifier: 5E:74:73:33:FB:FB:29:FA:BB:84:42:69:AF:EE:B0:65:8C:6F:7C:15
Certificate issuer: /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial: 010D0C9F432858488AE0A3E1B31061192E5CBE40
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/46bad2fa-2d2f-3bb1-8326-6ba50ba5be9e.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 203
IP address blocks: 2602:fa2e:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a3:e1:b3:10:61:19:2e:5c:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=035deb39-0d89-4aa0-bf07-fd08fa610385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:77:4e:cd:48:e8:12:ef:f4:ae:ba:43:a4:14:
45:ae:a8:1e:0a:45:7c:fa:bb:90:a4:37:f2:a2:ca:
73:84:72:b6:1f:82:0e:99:1b:c9:39:8c:51:e5:19:
5e:66:c2:23:03:8f:0f:6d:06:e3:ab:3f:99:06:bc:
0c:e8:2c:da:2d:32:7b:60:b1:60:6c:2f:1c:4f:61:
7c:bd:23:0a:55:66:a1:de:f8:f3:6d:fe:82:37:34:
aa:a8:7d:36:71:4b:4b:74:65:ff:e1:ee:9c:72:75:
9d:42:7a:3d:c3:2c:7a:23:7c:16:59:86:74:10:e7:
a6:b3:5f:0f:67:e7:47:11:25:8a:e5:1e:4a:90:e1:
b9:72:f6:f3:6e:93:28:e2:c5:26:63:14:10:a3:8a:
7a:23:05:87:d0:54:42:45:ab:8a:94:0e:7c:c6:bd:
6a:27:a8:ac:ae:e0:64:6b:6c:fb:5c:05:a1:1c:01:
22:9d:c1:c6:9c:ad:13:30:bc:ca:a6:32:97:8f:25:
6b:32:b8:26:41:e3:6d:a0:af:d5:eb:39:97:ee:c5:
8a:48:0f:34:7e:68:05:f3:63:64:db:31:27:62:92:
bb:ca:81:d8:ea:f2:da:de:c8:df:55:01:32:58:65:
35:0f:c1:0d:09:82:1f:ad:8f:ab:0c:c7:f7:1f:0c:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:73:33:FB:FB:29:FA:BB:84:42:69:AF:EE:B0:65:8C:6F:7C:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/46bad2fa-2d2f-3bb1-8326-6ba50ba5be9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl
X509v3 Authority Key Identifier:
keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa2e:200::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b2:b9:ab:c1:e8:c9:f3:62:40:0e:30:a3:6e:71:2d:01:c5:
53:6f:7b:dd:3d:f9:b7:d6:28:09:f1:9b:18:f1:c8:c4:1a:2e:
9a:0b:27:45:db:57:6e:ef:8d:84:7b:6e:57:0d:1c:c7:82:b7:
7d:02:36:d6:d5:fc:0c:ff:71:2d:b9:c8:56:a5:01:1f:64:cc:
d7:e6:34:f0:2b:fd:cd:08:c3:cb:fe:1b:85:bc:b6:45:35:0b:
83:87:e5:52:b5:35:f2:e9:d8:f0:da:5b:13:d8:bb:27:4e:87:
7e:0a:06:7a:cc:b5:68:3b:58:c2:49:11:4f:33:f8:91:15:c2:
0a:1c:0e:a4:ec:ac:59:6d:68:d1:13:c8:b6:0d:e3:af:17:1d:
be:19:00:c9:ef:f2:8f:b0:4a:11:5b:86:cb:af:48:2a:03:a9:
47:c7:a2:fc:c5:85:32:01:a5:52:6c:66:0c:95:ad:76:c2:8c:
b1:70:2b:b9:0f:35:f8:41:2a:a1:27:1a:c6:08:b2:a4:72:c3:
4d:c0:2c:2e:b2:fb:e9:c5:71:59:fb:5f:1d:25:af:6e:ef:59:
16:da:3c:0b:47:e3:e4:3d:18:e6:86:18:c6:16:ea:8d:6e:f2:
5a:ef:d3:76:b4:fb:83:21:d2:1d:6a:3a:6b:f5:6e:12:37:d6:
f2:42:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:06 2025 by rpki-client