Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
File: f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa (raw, json)
Hash identifier: H2gdzJvXLsj1nb3mkd7qBIMbQfWBjcqk9XaZdEeY1P8=
Subject key identifier: C7:FA:76:29:0D:5F:BE:E7:D7:2D:86:DD:D7:38:AE:EE:0C:8E:42:1F
Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial: 010D0C9F432858485E35B518CEB1F39FFA192834
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 0
IP address blocks: 2602:fb78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b5:18:ce:b1:f3:9f:fa:19:28:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=cfebf5a8-1766-40d0-9ea4-155e20d1ce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:7f:b6:24:14:34:df:6b:e1:86:53:5f:4b:
ae:cb:1d:09:0b:03:5a:9c:21:61:d7:d9:0d:7a:6e:
f5:b6:d8:14:00:48:7f:ff:df:e3:9e:a1:6b:2a:ba:
b8:ea:b1:56:22:f2:bf:55:72:bb:48:03:de:23:f4:
31:5f:a9:95:8c:e0:21:d1:3e:56:01:8f:df:ad:9c:
14:2f:3f:d0:5f:df:f6:a7:28:15:cd:d9:7e:f6:5f:
10:56:f3:cd:41:71:06:29:c3:8f:8f:85:63:f2:cc:
55:9e:1a:ed:37:ea:1b:d5:1f:a2:bd:73:5b:a1:bb:
35:ad:48:0f:b9:d9:d6:96:cc:b9:1c:2e:c6:df:2f:
ea:57:d3:52:4f:13:12:e0:5d:25:05:76:72:08:44:
d5:86:de:0e:4d:f4:35:6b:86:2a:ce:c7:6e:95:fd:
9c:36:36:bb:be:90:ec:e9:d6:67:4b:bc:2b:ff:b6:
9d:cc:f2:f2:a0:02:42:60:e9:61:d6:73:e0:e2:50:
a8:23:70:de:82:77:ea:dd:bd:79:97:51:a7:72:5c:
de:4f:ba:57:fd:e6:95:3c:80:03:5c:0d:b1:b5:64:
56:88:b1:d3:ea:10:1d:d1:0a:6f:ce:67:1e:44:52:
73:68:8a:c7:c2:0b:fc:72:d8:37:73:ff:c5:bd:7c:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:76:29:0D:5F:BE:E7:D7:2D:86:DD:D7:38:AE:EE:0C:8E:42:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
X509v3 Authority Key Identifier:
keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb78::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:99:62:50:db:ea:0b:5a:92:b9:26:ca:21:99:bb:bd:a0:65:
06:46:ea:28:16:79:1e:a7:3a:60:f6:e3:76:aa:2f:32:b4:86:
42:cf:d6:a3:a8:3c:d1:19:e6:e7:ac:a5:ba:84:31:6a:bd:ce:
a1:fb:88:51:54:09:4a:fe:c2:df:fe:99:e1:a1:3d:e6:7d:3a:
96:d8:b9:46:c8:3f:c4:b1:c3:04:cf:d0:fe:1c:9c:cc:7a:81:
cd:66:15:fa:3a:03:7d:03:5a:19:3a:2b:75:f6:b0:0a:42:00:
d1:d0:81:a4:0d:c6:91:c9:08:04:be:90:46:62:5c:50:d2:7e:
c8:20:c1:44:58:ff:67:4d:32:5f:6e:a2:17:9f:5b:7c:df:e9:
ee:cd:ad:a0:cb:8a:93:64:47:ed:53:b4:93:21:59:63:04:cf:
79:fd:c9:b8:d5:68:3f:30:3e:86:45:0b:5d:5f:35:c1:e3:b7:
91:31:e5:b8:39:34:b3:f4:32:05:1e:17:06:6b:b2:ff:a5:76:
4c:69:fa:28:dd:c2:13:f8:6b:3f:c7:9e:7e:56:c2:10:be:c4:
8f:05:14:6a:d7:38:96:48:c2:20:48:13:4b:08:29:ca:f3:54:
d9:d8:2a:5b:6e:bb:be:3d:f6:3b:df:a4:05:c1:f6:6c:6a:a2:
d5:1b:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:13 2025 by rpki-client