Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa
File: a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa (raw, json)
Hash identifier: TbXEmADESXAm3dDkjrpaqK45ekI0wAyefMqVJ8KOlAs=
Subject key identifier: 64:DD:10:48:DB:35:A0:8E:E1:18:97:B6:93:D7:7B:6C:85:FE:EC:61
Certificate issuer: /CN=a3e437f7-1e43-4bb4-be78-da876ad33518
Certificate serial: 010D0C9F432858479D76BC0811C31375AAEE2380
Authority key identifier: 2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa
Signing time: Mon 21 Oct 2024 13:00:41 +0000
ROA not before: Mon 21 Oct 2024 13:00:41 +0000
ROA not after: Sun 19 Jan 2025 14:00:41 +0000
asID: 30002
IP address blocks: 2602:815:1000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:9d:76:bc:08:11:c3:13:75:aa:ee:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e437f7-1e43-4bb4-be78-da876ad33518
Validity
Not Before: Oct 21 13:00:41 2024 GMT
Not After : Jan 19 14:00:41 2025 GMT
Subject: CN=8c35ecce-4e6d-418d-b2f9-d5a78c32c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:b3:ec:3e:d9:bc:2e:8f:d8:4d:0e:6f:12:
60:66:94:e9:8b:2a:bb:19:45:05:df:f3:99:cc:47:
74:56:27:e2:ef:c0:95:68:ea:2e:ef:5f:18:6c:f9:
0b:39:75:67:5c:1f:50:60:40:a9:57:28:56:29:b1:
8d:00:d4:0f:08:a9:e2:c5:6c:26:f8:37:cb:c5:22:
39:d2:52:31:25:50:8f:16:78:ea:ea:99:08:a7:d3:
01:d8:96:e1:6e:17:cd:52:3e:0f:d7:9d:a1:23:10:
54:b0:d0:84:89:b0:95:bb:47:bb:3e:02:05:1f:02:
a3:94:a6:50:3a:8d:a5:6f:7a:e1:b5:5d:ef:3f:62:
de:79:21:5e:39:21:57:cd:9d:30:ae:e2:a8:29:c3:
74:04:08:b5:d6:a9:1b:1a:02:5c:ac:be:2f:a1:34:
83:c4:da:d5:c8:fb:34:1d:0b:a0:d9:cb:ac:ec:41:
41:83:80:ba:d2:cd:2e:87:b3:a4:db:ef:d1:ba:84:
31:5e:c5:78:a6:0b:cc:2d:3f:f0:01:db:ed:5e:03:
16:a7:8d:68:30:ea:4f:42:03:39:8e:ee:52:a8:9c:
f9:07:52:5f:64:44:13:e5:0c:fa:27:24:0a:a7:b1:
cc:15:f2:53:ee:09:b0:3f:29:90:de:02:3b:ab:5f:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DD:10:48:DB:35:A0:8E:E1:18:97:B6:93:D7:7B:6C:85:FE:EC:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.crl
X509v3 Authority Key Identifier:
keyid:2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:815:1000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:0e:7d:42:cf:fa:91:a3:2b:b8:d6:8c:2c:1e:f2:45:ba:17:
a2:59:2d:4b:b3:78:72:01:6c:3e:2d:e4:d1:9b:71:83:c9:33:
c6:e0:2b:c6:13:12:df:91:bc:74:31:e6:bf:40:3f:48:4e:9a:
5d:eb:8f:d3:fb:ed:1b:e1:2d:ba:72:c7:6d:29:d2:6e:f2:47:
44:38:86:71:cd:6a:b8:ce:ec:18:77:a9:15:50:a6:e8:36:2e:
b1:68:c1:f6:26:c4:78:fe:7f:48:7f:c5:cb:be:62:bf:93:dd:
42:76:27:ef:cc:15:61:8a:8b:52:f8:76:41:7e:d5:63:bb:e3:
70:4e:ae:54:1f:62:4d:26:5d:68:d5:f0:0f:bf:9f:1f:2c:f1:
27:e7:60:2a:4b:95:b1:61:05:07:61:38:28:58:ac:f5:8c:cb:
68:f2:f4:fe:67:a6:3a:a1:01:31:25:50:05:1a:04:cd:b5:39:
ea:2f:e0:74:b5:a2:e0:06:31:bf:32:33:3d:ef:b7:d4:7c:33:
e3:2d:3b:34:2d:7e:90:94:58:a3:45:12:80:2a:dc:b7:83:11:
01:70:7b:c9:cd:bb:fb:68:8d:b5:03:7c:bc:1e:2a:1f:48:cd:
9d:8e:27:a3:e8:c5:9e:1e:d2:6d:14:eb:9b:7d:fa:da:7f:a6:
89:ba:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:39 2025 by rpki-client