Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa
File: bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa (raw, json)
Hash identifier: 4ntpTWlkdY9c2Vablcz/u7gshojbCLqrDP0dg+Q02X0=
Subject key identifier: C0:62:0C:01:F9:57:93:47:7F:A6:02:2C:A1:3F:72:1A:F6:16:A5:98
Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial: 010D0C9F43285849519D6C2780ED2C90673DDB00
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa
Signing time: Wed 26 Mar 2025 18:31:29 +0000
ROA not before: Wed 26 Mar 2025 18:31:29 +0000
ROA not after: Tue 24 Jun 2025 18:31:29 +0000
asID: 14618
IP address blocks: 2602:faca:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:51:9d:6c:27:80:ed:2c:90:67:3d:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Validity
Not Before: Mar 26 18:31:29 2025 GMT
Not After : Jun 24 18:31:29 2025 GMT
Subject: CN=aa8a8fde-462e-45a2-878e-4ecb0ac3aa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:a2:14:dc:60:86:e6:30:9c:4d:f3:11:41:
14:0e:4b:5d:77:c3:1a:82:55:42:19:12:c4:09:fe:
78:43:1f:51:9b:02:16:60:72:7b:7b:d7:41:c3:14:
f6:91:5c:3c:d8:9c:15:d3:dc:8c:1f:ff:a9:e7:65:
9b:3f:d6:70:58:01:94:74:6f:14:3b:48:f7:eb:a5:
d0:e1:ae:ee:89:cb:61:6d:ba:68:80:d9:52:c4:ea:
35:73:12:69:1a:04:16:36:0c:e6:9e:f4:f8:27:1d:
8c:34:00:75:97:7a:cb:df:8b:3c:d2:41:fe:31:a3:
21:95:bb:d1:51:0f:b3:97:fc:6d:73:2a:8c:95:ba:
e7:ef:7a:e9:0b:59:f0:48:da:fb:8d:d6:21:0f:89:
39:35:f8:fa:94:5b:8c:58:0a:d0:92:58:80:49:83:
16:36:ae:ed:8a:e4:31:9f:bd:99:29:6c:f6:f3:bb:
07:86:27:3e:ab:67:a4:c4:89:89:03:b9:e0:11:c5:
6d:1a:a0:e9:94:0d:0e:42:a0:58:47:ca:9a:56:a2:
99:6e:75:cf:ee:0c:4f:2b:ca:53:42:a5:e1:15:44:
92:84:8b:27:e1:04:4e:7f:79:88:79:22:43:58:4d:
32:64:d6:c5:81:6f:af:3c:66:05:bd:75:f7:32:65:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:62:0C:01:F9:57:93:47:7F:A6:02:2C:A1:3F:72:1A:F6:16:A5:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
X509v3 Authority Key Identifier:
keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:faca:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:75:01:57:59:49:73:1f:c5:be:d6:a1:58:6b:7f:da:8b:6a:
e4:36:f3:f1:a6:c5:e8:ea:2f:a5:38:14:95:ac:25:a1:2d:8f:
83:5f:13:0a:06:4c:95:0f:bf:b3:a9:4b:3d:1a:11:3d:d8:4e:
8f:07:ad:f1:d8:b7:2a:b1:63:e0:33:66:7c:66:1e:b1:1e:6e:
b0:b2:29:ff:47:28:22:65:40:ac:de:c1:a2:6c:d4:7c:a3:89:
a4:fa:c4:39:f6:f6:8b:4b:00:0d:f4:fc:06:ce:9b:a9:6e:ae:
40:7e:4c:b7:95:da:f0:d6:48:fa:41:89:98:90:f9:f2:ad:af:
74:b8:d3:c7:9e:9a:f3:cf:0e:93:59:c0:f7:19:3e:64:73:f7:
eb:b3:2a:6b:c4:bd:ab:9a:b3:f8:5d:68:68:ad:db:f6:6a:28:
9c:dc:b7:f4:79:33:31:ad:95:23:85:78:e4:c3:36:d5:63:f5:
e6:79:23:13:88:61:8c:28:22:cd:ff:89:a7:ec:7f:60:b4:b7:
54:57:ba:1d:df:96:33:7c:e2:92:89:fd:e6:dd:8d:a0:30:0b:
48:1d:70:2f:3b:4a:f9:35:8a:95:8b:71:f7:4f:cc:78:91:15:
1f:3c:db:6a:96:25:f6:00:8f:4f:51:70:73:7d:87:41:d7:50:
43:10:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:02 2025 by rpki-client