Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
File: ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa (raw, json)
Hash identifier: xVqNe+1URD833rm4e0zb887JNZZ2mWf/IV9t1TxqK4c=
Subject key identifier: 4D:7B:FD:9D:9D:FE:99:31:B7:40:CB:B2:29:FF:CD:AD:1F:13:23:A4
Certificate issuer: /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial: 010D0C9F43285848D0ABB33607460F24B29D2380
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 22296
IP address blocks: 2602:2e5::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b3:36:07:46:0f:24:b2:9d:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=5a54ea31-6bc2-4086-a563-2f596af01dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:6c:38:db:85:04:98:0d:a7:c3:52:ac:b0:
60:a9:55:3e:c3:ca:48:41:03:77:aa:a5:ba:59:a6:
e9:d7:9d:3f:df:59:7d:79:68:d2:21:ff:21:df:6e:
05:af:29:b1:59:83:f3:03:1e:a1:52:33:ea:23:65:
0f:84:59:80:b1:dc:14:ea:e8:4d:be:0e:c7:a9:4d:
ba:92:14:cc:5f:4a:f5:13:15:f7:0c:94:57:97:55:
02:69:da:8f:ba:f3:9a:a7:95:e3:09:71:74:fd:45:
6a:f3:3a:6b:94:93:92:54:7c:82:92:eb:5e:b6:36:
24:02:12:22:45:44:73:b6:ac:03:85:e9:6b:c1:b7:
3c:52:a9:4b:5e:43:22:10:6c:0e:d6:69:48:11:b4:
b2:b7:73:e7:2f:b5:c6:60:8f:75:c4:c3:07:5e:a1:
2e:4f:7b:4e:87:ec:04:2c:e8:ed:c7:5b:ba:4b:9b:
ad:3e:14:6d:03:0d:15:f6:d5:40:9b:d0:2c:66:7a:
50:77:75:98:35:a9:da:33:6e:32:96:fe:e6:60:0a:
df:ec:06:eb:b1:04:33:42:ce:44:b2:01:2d:f6:84:
10:3f:60:8c:d2:6f:79:3b:60:24:ef:84:93:85:31:
c7:1e:d1:8c:85:d1:60:38:48:f5:fb:db:5f:c8:68:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7B:FD:9D:9D:FE:99:31:B7:40:CB:B2:29:FF:CD:AD:1F:13:23:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
X509v3 Authority Key Identifier:
keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2e5::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:00:83:17:21:21:04:b1:74:31:2b:90:5c:16:87:66:d9:c9:
ad:3a:58:58:7e:34:2f:d0:bf:87:85:b7:fc:f5:5d:db:51:d1:
8f:a8:16:d7:91:9d:91:ee:7b:b2:bc:fd:a6:91:f1:01:14:88:
df:c8:97:e2:30:c4:34:11:fe:d2:06:3e:f6:bb:f2:fa:0b:3f:
dc:88:06:81:6a:e9:05:d6:65:bc:56:99:6a:88:c2:a8:72:3d:
e1:68:c8:75:9d:e2:7c:4e:c1:cf:6b:d1:60:1c:e4:81:c0:29:
74:71:fb:06:cc:23:70:26:89:87:02:61:4e:55:ef:56:3a:ac:
98:89:63:1b:f1:58:73:13:b5:35:a7:25:dc:5f:b5:36:ea:01:
62:dd:f1:4a:8c:f5:03:58:de:67:fb:49:cb:c9:4f:74:74:bd:
b7:df:54:a1:62:d7:aa:d5:a3:8e:4d:c9:48:bf:6f:06:bc:da:
d9:f8:5f:c3:b3:27:82:34:0f:61:ab:98:fb:fc:8f:91:3a:6c:
f7:85:ed:77:b6:c4:de:98:a7:56:35:69:29:14:a9:f8:d8:7c:
a3:6c:f8:30:4d:50:87:76:22:95:c9:3e:d8:b6:18:b9:fd:a6:
0d:db:d1:a9:5d:35:c0:62:7f:23:b8:23:97:21:f3:9b:a8:84:
fc:e2:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:54 2025 by rpki-client