Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
File: 15971b5a-708e-36a4-9675-d45099021eac.roa (raw, json)
Hash identifier: TwdIgoAjce1oq/UXdMgyx4pI5thSYy0rjNn2cUCLqxo=
Subject key identifier: ED:96:5E:51:51:36:82:EE:CC:07:0C:B0:AB:E6:AB:09:05:C3:04:DC
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F432858487325B6860D867F725DC1C880
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 13849
IP address blocks: 2602:fbb5::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b6:86:0d:86:7f:72:5d:c1:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=739f2527-b3f3-4e5d-8133-ac78f162cbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:15:40:41:9d:0c:c3:79:0e:2f:8c:6b:52:
29:ca:25:d3:c0:13:0a:ff:0f:30:7c:e4:99:29:df:
bd:e9:5f:25:e6:ae:0a:b4:19:83:3c:d4:49:81:5f:
de:5e:bf:12:c4:03:30:a8:6f:0c:d5:ef:53:66:6c:
64:90:34:d6:72:ed:f2:5d:38:0a:fc:41:5e:d7:fc:
8f:2c:a8:31:9c:f9:75:1b:0c:42:ea:9f:69:e1:9e:
f2:dc:3d:7a:0b:cd:80:fd:a8:b5:a9:2e:64:8f:68:
8f:2f:f1:f7:51:98:01:00:6b:89:d3:a6:c2:10:0d:
71:71:69:21:e8:0b:ac:a1:64:67:4a:31:c2:af:3a:
20:e6:3f:16:31:61:c9:ff:92:ce:df:5f:7e:27:c9:
2d:63:1a:9b:02:eb:e7:9a:4e:e0:f9:45:dd:69:d2:
bb:b4:7b:5c:57:f8:91:7c:96:d1:00:e1:8c:54:c2:
fd:b8:89:e6:56:18:7f:6d:d7:83:34:49:d5:79:24:
43:57:f8:02:46:d9:7c:37:59:b1:d9:cf:17:41:54:
0b:75:23:dd:3e:62:c7:72:58:bf:1c:53:85:37:c0:
59:72:5f:56:39:2d:33:ac:61:c8:4a:e4:fa:f3:c4:
5a:6d:05:8e:54:b5:ad:4c:00:57:26:11:1c:59:f7:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:5E:51:51:36:82:EE:CC:07:0C:B0:AB:E6:AB:09:05:C3:04:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbb5::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:71:8e:bf:ed:c5:81:f7:a3:25:63:4b:2f:6b:61:92:10:99:
91:2a:ef:49:cd:9d:a6:e5:f9:19:d6:5a:cc:99:d5:cb:f8:a9:
94:7c:6f:90:0f:ed:39:47:4d:9c:15:e7:81:85:c5:87:70:5d:
72:d6:03:46:fa:c7:51:30:44:01:be:5b:93:da:b8:c0:0d:e4:
a1:4a:f9:23:d9:31:86:fd:f4:88:9e:fd:37:ff:f2:38:18:29:
29:94:05:8a:60:95:c0:1f:b0:66:6e:94:95:8b:74:77:b5:ac:
0b:15:fb:d3:62:62:8d:2c:c9:61:d3:e8:52:43:bb:e2:a2:6e:
6a:9f:37:c4:2e:de:30:35:e1:b0:fd:6f:4a:85:1c:47:ea:4f:
37:e1:77:12:39:5b:f4:5c:54:9b:08:b6:e5:68:8d:c2:1b:fe:
b8:1a:d8:44:80:b2:a8:37:15:28:6d:14:22:e8:40:4c:59:66:
a9:12:8f:8a:53:91:08:21:ac:e5:62:d6:55:be:6e:48:01:94:
1f:0a:d6:75:6c:54:8f:a8:8e:b4:71:43:d9:a1:05:67:18:6c:
db:25:9a:10:4d:6e:9f:66:1c:14:b0:20:6d:e7:4a:c5:63:ee:
9a:c0:a4:5e:5f:96:26:0d:3e:bb:b2:c2:8b:a7:22:46:3b:72:
55:d0:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:34:50 2025 by rpki-client