Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9adfbfa5-5ef1-3afd-b40b-18b06342bccd.roa
File: 9adfbfa5-5ef1-3afd-b40b-18b06342bccd.roa (raw, json)
Hash identifier: /ZiTmxvKH/gXKsukzdrUB9TW/ECpsxPwi983unnm1o4=
Subject key identifier: AF:FA:18:46:61:16:89:64:47:FC:61:BD:1F:2F:D2:08:00:5E:0A:EC
Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial: 010D0C9F43285848547020D9AEE6F673F8E2A640
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9adfbfa5-5ef1-3afd-b40b-18b06342bccd.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 13780
IP address blocks: 2602:fc09::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:20:d9:ae:e6:f6:73:f8:e2:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=7297e199-1983-48bb-bad7-5a66b02f175f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:45:2c:55:d2:0d:6a:ee:cb:1b:8f:7f:c3:
4c:40:67:e4:e3:aa:27:ec:dd:62:c6:d3:89:d6:57:
07:fd:07:3b:1d:84:e0:10:ea:36:d8:ae:87:29:53:
de:34:07:e7:64:e8:c5:fe:93:d6:c6:07:a9:9b:a9:
cc:bf:0b:9c:ba:32:d5:bc:fb:d8:cb:ba:42:1d:99:
44:3a:9d:10:6d:bb:55:18:11:58:5c:73:56:68:17:
6b:18:6c:ea:5a:af:d1:0e:95:7d:07:c7:43:49:51:
6b:4e:ba:a8:e6:be:82:bc:20:95:98:db:1a:dc:ad:
8d:ac:20:1b:2e:5f:3a:53:a3:37:a1:3f:79:ae:9f:
03:57:df:9d:fb:8d:10:66:67:de:14:51:75:e1:85:
8a:fc:6e:5e:72:39:ff:17:89:c9:36:79:01:a0:ef:
44:8c:ad:e3:ea:2f:85:7f:e3:71:2e:86:e9:42:50:
e2:2e:b4:16:1f:f8:af:8f:db:c1:3a:44:ed:4c:f2:
c0:16:01:16:b1:08:34:84:23:7b:24:52:dd:83:d3:
bf:6f:c9:77:f4:a3:b9:0d:8d:cb:8a:5a:7d:9d:97:
7e:e8:df:cb:6c:64:5e:77:21:cf:1d:39:33:30:4c:
53:db:23:23:a1:65:41:28:ba:5c:1f:21:e6:85:39:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:18:46:61:16:89:64:47:FC:61:BD:1F:2F:D2:08:00:5E:0A:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9adfbfa5-5ef1-3afd-b40b-18b06342bccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
X509v3 Authority Key Identifier:
keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc09::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:72:99:77:35:e0:e5:db:aa:18:5a:66:b0:03:b9:cf:39:08:
27:cb:98:c3:b8:81:eb:d6:b5:d4:4c:8f:67:43:be:58:2c:23:
a9:6d:83:b2:1b:b1:09:fe:08:60:c8:f7:c1:d5:47:ca:18:78:
71:ba:94:07:1b:a1:5a:24:97:46:dc:38:00:44:67:d9:65:6b:
5f:b1:d3:d8:5b:57:2d:51:2b:b0:ab:29:2b:31:85:0d:b2:de:
67:f6:be:c2:09:da:19:fa:45:54:7e:89:6d:9d:b7:ab:06:2b:
38:02:b5:80:43:cd:25:1d:7f:1f:1b:45:cc:a6:ac:2c:f5:83:
6a:77:de:db:37:9b:6c:6e:f5:bb:a0:14:6a:68:05:fb:d8:24:
f2:e5:b9:83:bd:3e:fe:b8:b1:b5:aa:b0:d0:0c:36:77:c5:d6:
14:e1:61:42:4d:70:af:1f:b3:08:8a:53:ec:be:be:17:6c:28:
8f:28:ab:b7:e0:c0:b7:41:d0:c9:b4:15:fe:44:4d:ed:42:fd:
84:f3:8a:7b:f4:59:54:8e:e5:07:69:05:93:49:96:ef:de:66:
46:fc:9c:47:fd:08:f9:12:2a:0b:84:d9:0d:ab:2a:ec:8e:96:
cb:3b:3b:95:b9:0f:e2:fc:7a:a4:5f:64:6a:8c:f8:2f:b4:db:
51:d9:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:19 2025 by rpki-client