Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/8458c3bf-5eac-3cfa-a492-31c7b70ea7e4.roa
File: 8458c3bf-5eac-3cfa-a492-31c7b70ea7e4.roa (raw, json)
Hash identifier: gzG1jT9OIblDCsgVJLi8oQot4hlNc9+elEbHMe82Q80=
Subject key identifier: F2:8D:8F:CB:C9:B7:48:F3:FD:D4:AF:6D:4E:21:24:E2:A3:55:8C:D7
Certificate issuer: /CN=7671ed9c-f209-4882-bd38-5f129f761a08
Certificate serial: 010D0C9F4328584172902B2DFD40A8ABBCC1CE40
Authority key identifier: 78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/8458c3bf-5eac-3cfa-a492-31c7b70ea7e4.roa
Signing time: Tue 04 Apr 2023 19:04:07 +0000
ROA not before: Tue 04 Apr 2023 19:04:07 +0000
ROA not after: Mon 07 Jul 2025 04:00:00 +0000
asID: 399970
IP address blocks: 2602:fc3b:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:72:90:2b:2d:fd:40:a8:ab:bc:c1:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7671ed9c-f209-4882-bd38-5f129f761a08
Validity
Not Before: Apr 4 19:04:07 2023 GMT
Not After : Jul 7 04:00:00 2025 GMT
Subject: CN=6a61236b-f65f-44b9-a1b7-15a1a6f24f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:69:76:e0:e5:43:89:73:f4:a4:2c:28:fd:
75:68:69:f7:aa:a7:bb:9b:1c:b4:ff:3c:fe:35:30:
40:10:c3:46:5a:0f:f1:08:b4:4d:30:e3:b8:0f:03:
24:c1:01:94:1a:bc:e8:82:e7:af:dc:b3:47:0e:e3:
d2:cb:5d:86:7f:88:0f:43:8f:f8:06:36:70:c7:e9:
a6:24:63:de:a2:55:3d:7d:66:5d:bf:06:52:ba:ab:
7d:3c:ec:b3:a5:92:d6:a2:7b:a3:b2:c3:18:7c:ee:
55:49:2d:97:40:c8:db:5e:3c:e1:40:bd:92:d9:03:
28:3e:fd:8c:c2:ba:bc:49:c6:90:4f:18:43:33:6a:
47:fe:b6:0a:1d:fd:b9:16:90:65:be:41:d9:e0:7e:
c8:bf:b2:97:88:c1:f5:1f:50:f0:10:dd:15:18:66:
c4:6c:e3:92:ad:03:a0:85:bf:4f:b7:cd:d5:e9:fe:
de:28:d1:d8:fa:e4:d7:5c:7c:9a:f3:3f:4c:af:0f:
c7:e0:d9:a0:6c:46:5b:bb:3d:02:4b:7a:de:54:65:
a3:38:b7:be:dd:e3:fe:57:ed:98:e2:53:60:f0:cd:
51:fe:92:17:8e:50:7e:3c:97:3f:36:89:16:59:f8:
2a:f5:aa:23:2a:02:ad:86:ea:df:37:ce:52:21:f2:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:8F:CB:C9:B7:48:F3:FD:D4:AF:6D:4E:21:24:E2:A3:55:8C:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/8458c3bf-5eac-3cfa-a492-31c7b70ea7e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/7671ed9c-f209-4882-bd38-5f129f761a08.crl
X509v3 Authority Key Identifier:
keyid:78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:200::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:c8:87:d6:b2:07:dd:cf:eb:58:c3:49:53:46:80:f4:f0:5d:
b0:59:94:4b:18:68:70:d1:45:62:80:a7:94:64:a8:52:17:05:
a2:32:9b:0e:d8:f0:b0:59:ff:a1:de:54:41:72:6a:26:66:ff:
16:d1:0e:73:a4:97:1f:24:70:be:f2:38:4e:f1:98:b1:93:ed:
0e:34:c3:e7:f1:cb:92:03:70:e7:7f:ab:3e:59:07:16:d6:65:
02:5e:9d:b9:e2:8d:fb:18:b9:5a:30:5a:af:08:e7:bc:ad:04:
25:43:e3:9d:a3:49:97:6b:19:ab:6a:5d:93:fe:1a:be:54:4d:
f8:90:94:81:b6:7f:0b:47:73:32:71:26:86:0a:8a:c0:77:d4:
8c:32:d2:a3:72:8f:18:4b:e1:7e:14:bc:70:b9:49:98:b1:66:
74:6f:59:d7:a4:64:fa:ef:eb:c1:53:f5:58:c7:0c:9a:20:e0:
dc:dd:5a:e9:3d:78:f6:b1:2f:39:da:96:63:80:64:96:98:0c:
4b:97:d9:e2:bf:07:a5:93:69:e6:22:15:00:c0:08:3c:1d:90:
3d:42:e7:c8:87:bd:e8:79:a4:31:5c:7f:c8:a0:ce:34:2b:61:
a2:a1:ff:1f:ce:56:7d:fe:2d:19:ce:3c:81:b4:c3:8d:48:ac:
c0:46:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org