Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa
File: 7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa (raw, json)
Hash identifier: zWiqmnGG2yRFbrg4xlw1nCY17690sKrd+D8ctGRHocQ=
Subject key identifier: FB:5D:3E:26:94:FA:A1:82:C5:80:1B:C1:24:E4:5E:CC:B9:CE:26:C8
Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635
Certificate serial: 010D0C9F43285848DC80C65C62B7FD65D7B82F00
Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa
Signing time: Wed 12 Feb 2025 19:44:11 +0000
ROA not before: Wed 12 Feb 2025 19:44:11 +0000
ROA not after: Tue 13 May 2025 18:44:11 +0000
asID: 401523
IP address blocks: 2620:d0:e000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:80:c6:5c:62:b7:fd:65:d7:b8:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635
Validity
Not Before: Feb 12 19:44:11 2025 GMT
Not After : May 13 18:44:11 2025 GMT
Subject: CN=511bafd6-9eb5-41c1-bc9e-82e13e8202c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:ba:10:db:5d:66:e3:1e:35:c5:07:72:ab:
0f:21:01:16:4e:a1:00:f4:eb:c1:be:bb:3f:d8:73:
87:47:0e:b0:53:eb:33:50:51:1d:98:93:fa:b1:27:
3e:13:6c:ef:83:23:9e:38:e6:99:78:bd:23:d7:5b:
3a:eb:06:40:b4:3d:4d:8e:b2:06:15:02:bc:71:a4:
0d:ad:b2:50:bb:d1:78:88:ca:fb:00:a9:2f:ab:76:
28:5f:60:68:9b:8d:dd:f8:34:d3:f6:37:9f:77:16:
0f:4b:a7:ef:12:24:4a:c3:0c:17:f7:f9:23:ce:40:
f3:f8:9a:3e:99:74:b3:f9:bb:03:71:43:1b:9a:89:
70:fc:76:ce:0a:a6:16:49:30:1e:d9:cd:9b:46:3f:
24:70:9a:35:51:48:06:75:6e:25:2e:b5:99:1a:85:
7e:28:75:c6:c2:d3:bb:ab:c4:7b:83:49:d0:65:d9:
cc:a0:78:7a:53:a7:3b:20:54:90:11:48:15:83:c7:
70:84:20:c0:66:ee:a1:66:61:ba:3c:5b:6a:04:a8:
c0:84:11:6d:58:ef:6b:f7:16:34:4e:84:6c:d8:8c:
5e:2a:9e:a7:d7:98:f3:a8:11:ec:f5:1a:b4:77:74:
8f:60:56:53:50:ba:30:04:12:c8:fd:72:ca:4c:95:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:3E:26:94:FA:A1:82:C5:80:1B:C1:24:E4:5E:CC:B9:CE:26:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl
X509v3 Authority Key Identifier:
keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:d0:e000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:25:5a:9d:6d:f4:68:d8:dc:a0:10:cd:38:aa:e3:e5:0e:59:
96:ef:72:47:17:b4:83:10:2a:5a:3e:af:8e:9e:0b:6c:2c:e7:
91:0c:bb:dc:89:10:43:74:04:c4:66:98:1a:99:1b:cd:57:e2:
14:ed:62:aa:fb:f1:6b:b8:31:71:85:b0:92:55:1e:f0:b7:5e:
dd:d2:4a:68:1a:78:67:84:be:ec:96:92:37:54:b4:16:7a:e4:
ce:de:58:a1:6c:29:a4:4d:b8:fe:18:08:7a:64:35:f9:e0:3d:
7c:14:a2:79:0d:c4:10:2e:15:f6:e6:b0:59:c3:f1:d8:90:a4:
5e:5a:78:c8:22:a1:71:5f:b8:e0:0f:5a:9a:5b:d7:ad:85:80:
ad:c7:0b:21:f0:89:3a:7f:e6:2e:20:69:7f:ff:e2:d4:d6:22:
83:b6:21:4c:12:cd:a4:3c:5f:a7:78:31:52:51:d3:d8:75:a0:
c3:fc:e1:34:bd:dc:11:e1:22:c2:18:90:e4:ec:e0:6b:7b:87:
06:80:2c:17:92:96:c0:a8:af:25:f4:c9:67:81:80:13:78:5d:
e8:b4:29:9b:09:1b:46:f5:ef:24:fb:95:36:d3:60:24:a8:c2:
ee:f1:c3:8c:e0:19:5e:7c:e8:e9:8e:f7:86:e9:78:34:1d:1b:
91:84:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:55 2025 by rpki-client