Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
File: defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa (raw, json)
Hash identifier: 1tjTL1QMFkNB7DOm7oBMex723JbCwoplEcXOjvcbk9o=
Subject key identifier: BE:CB:55:43:C5:06:22:92:76:FB:15:2F:0D:E2:AD:15:FF:64:45:2E
Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial: 010D0C9F4328584928CAEAD7D8976327CAA99740
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
Signing time: Wed 12 Mar 2025 03:35:01 +0000
ROA not before: Wed 12 Mar 2025 03:35:01 +0000
ROA not after: Tue 10 Jun 2025 03:35:01 +0000
asID: 62874
IP address blocks: 2602:ffb7:594::/48 maxlen: 48
2602:ffb7:5a0::/46 maxlen: 46
2602:ffb7:d00::/40 maxlen: 40
2602:ffb7:f00::/40 maxlen: 40
2602:ffd9::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:ca:ea:d7:d8:97:63:27:ca:a9:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Validity
Not Before: Mar 12 03:35:01 2025 GMT
Not After : Jun 10 03:35:01 2025 GMT
Subject: CN=e7f727f9-e02f-482a-8950-0ded4ee24fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:58:b7:d5:67:ea:94:4b:ed:f4:10:fa:91:
21:dc:65:7d:3b:3b:51:c5:2f:39:c9:18:3e:af:69:
d2:d1:b5:6a:0b:91:ac:00:27:f4:12:2b:8d:6f:c4:
46:cf:10:5a:f8:7a:fa:22:fa:ef:bd:2a:fc:f7:2d:
66:de:c9:27:9a:e8:a4:7d:b7:f1:72:e1:d9:e7:46:
23:1d:68:ec:d6:fa:77:b2:89:06:8b:37:67:ad:d3:
aa:8d:57:9d:d7:c0:46:a3:2d:94:e8:a5:16:52:6e:
bf:b8:e2:2d:c7:b5:c7:5a:f5:d6:9d:bd:82:05:c6:
58:d5:81:7b:b2:ea:6f:45:ab:90:c1:d4:f5:4b:d3:
3b:ff:2d:2a:1f:26:ee:ad:0f:3c:32:b4:68:46:17:
0d:70:d8:e6:5a:a1:a9:fa:1c:05:b2:be:d7:63:f9:
0b:46:50:df:9a:a6:81:e0:9c:39:72:e5:3d:49:7c:
26:f5:f0:ba:3f:39:e5:c6:60:5e:a9:02:cc:78:28:
fe:2c:3a:1d:ee:95:58:93:31:84:ee:06:c4:97:c5:
eb:0b:ad:f8:7e:32:42:b7:9b:03:f3:3f:07:61:0b:
4d:f7:8a:fa:46:bd:87:59:28:0a:87:72:5e:93:47:
b1:fe:d3:41:5d:f5:88:c3:82:33:61:4e:f1:1b:b3:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CB:55:43:C5:06:22:92:76:FB:15:2F:0D:E2:AD:15:FF:64:45:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
X509v3 Authority Key Identifier:
keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:ffb7:594::/48
2602:ffb7:5a0::/46
2602:ffb7:d00::/40
2602:ffb7:f00::/40
2602:ffd9::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:06:3e:f8:46:cd:42:bf:f7:93:24:19:a1:e7:5d:2e:b8:66:
2e:04:ef:9b:c0:83:19:45:30:6b:cb:03:f4:0e:a6:f6:76:7b:
03:45:91:17:b8:e6:9b:2e:ee:76:84:2c:47:89:33:bf:70:e1:
36:c9:c6:09:7b:10:61:eb:7e:62:0c:01:b5:f7:12:64:c2:fd:
72:ea:5a:32:65:97:6c:50:6e:d4:d8:6f:39:b6:13:81:9e:74:
73:09:eb:0d:4e:b3:1b:96:6b:9d:3f:b0:1e:2a:24:4f:41:ec:
5d:9a:c9:48:6d:50:15:86:89:c8:b4:d9:c1:0b:97:c5:85:ef:
7a:3b:65:a4:fa:fc:67:5c:30:25:f6:55:6b:d4:20:c6:2f:85:
0f:01:d3:d8:c7:26:5d:1d:b8:eb:c3:ff:a9:f3:35:43:39:34:
c2:df:db:66:d1:81:50:bd:e7:05:e8:8d:9b:bd:b6:24:27:bf:
6a:db:b2:2c:e1:58:19:2f:04:5b:6b:09:76:2b:97:c2:d8:50:
75:9f:b1:fc:7a:1b:16:7c:74:37:33:19:66:bf:59:67:c2:22:
3d:0f:97:0e:59:75:97:2b:8e:e9:9e:35:f8:ee:69:47:59:08:
ca:bd:d6:28:87:1e:d5:ef:15:ed:71:6b:63:4a:81:36:44:c3:
27:2d:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:42:40 2025 by rpki-client