Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/b7dd2f68-8d55-3cf7-941c-53fff707a9e7.roa
File: b7dd2f68-8d55-3cf7-941c-53fff707a9e7.roa (raw, json)
Hash identifier: r1RKYpc3qKqa9FldREz/6mbFhXGH1HAO54TfTLPZXNM=
Subject key identifier: 3F:D3:93:2A:5A:B5:FB:F5:CD:CA:0E:E8:49:63:9B:F4:13:2E:F7:CB
Certificate issuer: /CN=0059f687-be1d-4396-97d0-dbe0841392ac
Certificate serial: 010D0C9F43285848F4F6A29001EB1A15A35CF7C0
Authority key identifier: 91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/b7dd2f68-8d55-3cf7-941c-53fff707a9e7.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 23121
IP address blocks: 2602:f913::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a2:90:01:eb:1a:15:a3:5c:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0059f687-be1d-4396-97d0-dbe0841392ac
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=558cc654-d03e-4e00-bd6f-42591536ce8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:0f:a6:db:71:cc:f4:4e:79:77:b0:a9:05:
46:c3:27:fd:a6:63:da:42:3c:9b:0e:a9:87:bc:36:
65:be:35:c9:ac:de:4f:6e:82:0a:81:27:e3:88:1b:
f8:df:bf:37:4e:e3:2b:61:b0:5c:bf:39:ca:cd:69:
fd:41:8d:34:d2:ce:3a:65:89:a3:4b:53:e8:b0:40:
73:8e:c5:b2:6e:25:f1:a6:53:fb:2b:4b:e6:28:a7:
91:60:1c:f2:86:27:54:65:55:96:a3:64:bf:b7:94:
d2:29:5d:2f:b3:f7:5f:27:2d:98:9f:9e:99:f3:ea:
b4:39:d0:46:4b:b7:46:00:86:fe:ae:67:5c:ee:6a:
1b:b7:2b:ce:6e:38:07:1d:94:78:16:77:89:13:fe:
73:2e:0c:4d:ff:05:ae:46:50:77:64:70:08:07:65:
c3:c2:e3:80:da:06:7d:dc:9f:51:b0:58:d2:fd:f1:
39:36:60:df:3a:73:5f:f0:27:8f:e1:ca:0f:11:d2:
cb:a6:b1:9c:b0:2e:3e:26:ab:d0:db:05:f6:b9:be:
41:00:05:73:7d:64:9d:71:8a:87:cc:4a:b1:f8:5a:
d2:df:f9:39:a0:c7:f0:18:a9:85:e6:96:5c:d6:cf:
9b:43:59:d5:8e:92:ec:03:e2:13:21:c6:c5:69:73:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:93:2A:5A:B5:FB:F5:CD:CA:0E:E8:49:63:9B:F4:13:2E:F7:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/b7dd2f68-8d55-3cf7-941c-53fff707a9e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl
X509v3 Authority Key Identifier:
keyid:91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f913::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:b4:59:6b:e9:0e:ff:0a:59:ea:8e:1d:c8:2d:ac:b1:65:df:
74:9c:be:70:45:01:2f:e6:18:e6:a2:40:2e:91:68:67:66:57:
7a:04:1b:32:a3:39:72:95:0a:18:de:6c:a2:41:12:34:7f:da:
00:86:12:e3:1f:c9:69:d9:dd:17:34:e3:3c:ba:03:f7:20:4f:
82:4c:4b:e8:41:1b:96:70:b3:7e:09:35:9a:06:fe:fe:b8:7f:
15:69:a8:24:ab:41:81:1d:5e:23:83:b6:e4:d2:f9:f8:bd:65:
a1:2d:9f:14:0c:72:2b:5e:66:be:2d:76:18:41:05:44:3f:af:
51:38:59:17:21:20:6a:ca:3a:b7:f0:91:9c:16:2b:56:b5:51:
04:77:bb:84:2b:cb:de:78:7c:60:1c:87:28:b3:58:dd:56:1f:
a5:b6:29:a7:34:97:74:67:2a:55:d4:ba:57:60:b5:a9:34:6c:
dc:0a:25:7e:3c:b5:d1:7c:93:c4:18:c0:53:7c:ee:f0:9a:b9:
44:6b:73:1c:a3:a4:19:39:0e:1d:f1:d7:64:90:bf:1f:46:3e:
dd:0c:d8:1c:24:37:a5:57:e9:af:a9:60:cd:63:65:22:d9:db:
dc:2a:8e:ee:1a:48:f8:31:be:e8:6d:71:82:2d:09:09:7f:80:
e7:67:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:59:56 2025 by rpki-client