Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
File: a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa (raw, json)
Hash identifier: RQpS9auA2P2b114EFzsH9qzD5mP+2wZFHtpPC9swiVw=
Subject key identifier: 49:91:24:54:F8:2F:13:2E:60:AC:99:DB:BD:BA:CA:43:D6:DF:FF:58
Certificate issuer: /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial: 010D0C9F43285848F4F68C359FDABB99A4905E80
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 25773
IP address blocks: 2602:fd59::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:8c:35:9f:da:bb:99:a4:90:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2c8e591f-32e4-4bc8-a231-beda7c759dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:19:a1:b5:a8:89:ab:be:70:dd:32:de:db:
bf:5d:34:8c:82:26:a0:81:1d:81:fe:00:ca:20:3b:
f4:f2:fb:76:e0:88:d2:b0:77:02:bc:46:5e:26:20:
5a:40:64:2c:25:5e:d5:4a:a0:0b:28:bd:36:99:9a:
a2:fc:34:49:10:ba:6e:d6:a5:60:b3:e2:0e:af:4f:
dc:8e:89:35:b7:5e:b4:f7:9c:98:9b:48:09:d2:1b:
ce:f9:18:c7:11:fd:00:8c:66:11:cd:0b:61:8f:a1:
64:ff:ea:08:15:8e:64:fc:04:14:66:92:2b:49:15:
22:8e:33:00:34:7e:1c:69:8d:21:e2:96:ea:17:ab:
9f:16:b9:18:fc:ee:e6:89:56:6a:9d:7c:ec:ba:2b:
d3:04:a3:92:6c:4c:e5:aa:74:b0:63:e1:f2:28:fb:
b2:ca:8d:b7:e9:83:71:fd:90:df:0e:b0:5a:5a:7e:
a7:1d:c8:b8:4f:f8:95:5f:bc:59:9e:e7:70:ff:69:
b9:c4:13:df:08:89:30:73:6a:ed:c5:2e:42:e0:73:
17:c3:72:19:f4:f3:7f:cd:9b:cb:93:03:25:65:76:
aa:d3:74:65:c8:8c:93:6e:0a:d9:e3:dc:68:aa:af:
d6:7a:41:fb:c8:82:1c:63:04:75:1b:47:95:a2:96:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:24:54:F8:2F:13:2E:60:AC:99:DB:BD:BA:CA:43:D6:DF:FF:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
X509v3 Authority Key Identifier:
keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd59::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:30:a3:e9:a2:1c:73:5f:d2:90:4d:e9:84:a4:70:4c:24:d8:
b3:c1:ca:46:c3:f4:d9:2a:5f:3d:c7:da:f9:41:f1:b3:57:81:
0b:c9:5a:6e:13:50:66:51:0b:38:82:a4:1e:39:29:2f:02:23:
7f:df:b9:e7:03:3f:ce:c1:af:da:2c:5d:5f:3f:a7:4a:b0:2a:
bf:66:29:4e:16:d3:45:ae:f1:0c:97:21:68:20:50:b6:70:27:
56:92:07:83:f5:74:53:0b:05:14:f4:5c:3c:e0:24:d8:8d:0c:
0e:9a:86:2a:6f:54:a0:1e:a3:b2:29:1d:a3:90:0b:95:fa:b4:
ee:4e:d2:4c:9f:a8:31:0a:51:e4:78:2a:da:1b:4a:ef:37:07:
d5:d9:c6:30:e6:70:35:2c:b0:39:e8:f0:7d:74:99:2c:db:b0:
ff:31:79:a4:63:dd:2a:5d:5e:82:99:c1:b9:ba:34:67:21:58:
6e:57:4b:1e:c3:49:ac:21:5c:ae:9b:20:8b:c6:99:bf:c5:63:
49:4f:bd:ea:28:16:7a:07:c3:ae:29:07:58:df:e5:d9:d5:8e:
25:0a:1b:58:5b:7f:80:2e:5f:ee:1e:11:2e:12:b2:c1:04:f4:
23:1d:6a:3a:39:06:37:20:52:7c:6b:27:ee:34:e3:dd:a4:34:
2c:80:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:08 2025 by rpki-client