Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa
File: 1e11158d-d12e-3742-bcfd-5fbe33e79773.roa (raw, json)
Hash identifier: kzcLIxacKDTy2NvqqliFheoKQGzvnBKbAyfYMJrCiaQ=
Subject key identifier: F4:D8:EF:DC:98:B3:CF:F5:6A:9B:E2:6E:69:94:D5:D0:2A:AD:26:D7
Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial: 010D0C9F43285848B6262082D8FDB55B259C3BC0
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 29802
IP address blocks: 2602:f972:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:20:82:d8:fd:b5:5b:25:9c:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=e88487e1-3f70-44fc-97ee-3a32d9361488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:27:47:85:a8:b8:6e:b4:64:1b:0a:fd:a9:
8e:c8:b2:75:ed:88:85:24:8f:22:26:77:6c:34:f5:
65:a3:76:a1:0b:88:e0:8b:5b:3f:a5:7e:b7:80:30:
11:38:f1:91:74:4a:b2:51:00:72:11:c0:6d:08:33:
84:7a:fe:40:a5:57:53:71:1b:35:ba:a4:a8:5a:47:
06:51:51:64:fd:f1:de:b9:7e:bc:df:a8:65:d6:50:
e2:2e:fc:4a:3b:79:5b:fb:a1:ba:ef:c4:84:6e:a6:
95:ad:b4:83:31:0e:f8:15:ba:04:57:90:e3:93:0e:
22:ba:e1:74:0c:17:eb:b9:42:fd:2f:24:27:e8:8b:
56:6a:87:ba:5a:93:7b:73:c0:ee:8a:6e:6b:dd:59:
0d:52:d0:21:d0:2f:39:1c:ed:4d:4f:86:45:3c:c7:
b2:61:35:84:e8:04:3e:34:c2:82:8d:66:74:55:7b:
ca:f8:95:46:88:fd:39:60:b3:58:94:c2:23:a4:9c:
70:98:54:2f:d2:58:1f:63:a7:76:60:10:db:a5:f7:
90:cb:a7:b5:6a:7d:a4:39:7b:54:9a:da:1e:92:a8:
3c:82:3f:0a:09:4f:48:5b:7d:f7:00:33:19:6d:77:
63:41:3d:d1:9b:56:f7:1e:29:51:14:83:a0:ab:d0:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:EF:DC:98:B3:CF:F5:6A:9B:E2:6E:69:94:D5:D0:2A:AD:26:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
X509v3 Authority Key Identifier:
keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f972:c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:42:a3:94:7c:4f:96:dc:2c:2d:b4:a2:cc:85:d2:38:a4:45:
40:01:ce:04:b9:db:0a:13:c8:34:1d:de:b2:6c:61:fd:81:4f:
b8:db:fd:91:1f:44:86:e2:a8:60:bb:a2:95:08:2e:54:21:42:
00:e7:f4:d8:74:fa:40:44:77:8c:9f:cd:20:1b:73:b0:9f:c6:
d5:1b:fa:31:61:2b:91:09:3b:a4:9a:f4:9e:6d:18:8e:b3:d2:
cf:62:f2:9d:84:d5:f5:da:49:f9:35:5a:11:ac:bc:e1:7c:79:
28:42:4d:ea:25:20:a2:89:40:47:c5:e7:b3:88:96:77:3b:58:
3b:b5:a8:c9:f2:c1:65:fd:b8:9e:9a:17:d2:f5:3b:73:19:93:
f0:2e:72:36:1f:b3:ac:4b:f5:30:22:8a:dc:06:aa:da:e7:12:
13:71:83:d2:d3:b7:60:b2:95:63:48:ac:96:7f:15:a6:b4:7a:
e5:8c:c6:3c:fb:45:3a:d1:c4:06:94:1a:64:20:3c:3e:f8:4b:
f7:06:f3:76:12:94:c3:28:58:07:ba:07:41:0a:1b:d7:bf:f4:
d6:70:7a:45:ff:ae:a2:22:e9:20:37:00:48:5f:e3:15:02:74:
07:63:1a:47:0e:1c:8a:91:96:2f:43:35:2a:e3:eb:de:05:38:
ce:ad:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:46 2025 by rpki-client