Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
File: 85f2ea3c-4e52-3222-94c6-afd6e810592b.roa (raw, json)
Hash identifier: gPD23RTDMZ8Peh5tDTt6x+XCXOMgDYacN/vHoxxniX8=
Subject key identifier: D8:F2:89:13:B9:DC:E5:39:23:70:EC:A9:E7:10:69:BD:96:D4:C2:D2
Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial: 010D0C9F4328584871C076A232D37E977EAD3700
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2602:fa28::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:76:a2:32:d3:7e:97:7e:ad:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=9928e55e-1bff-4737-82f4-cc6f1d6870ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:db:0b:21:f0:43:52:3a:6b:c0:d5:93:22:
38:37:b4:46:fb:af:d4:04:30:86:e5:2b:d8:85:30:
65:2b:07:63:92:12:f4:f7:b9:fe:77:94:ca:53:1d:
69:ca:aa:52:4b:ea:00:72:a2:0c:e3:94:f1:1c:6c:
41:8a:bb:29:8d:a2:b7:f8:43:29:1e:12:84:26:1c:
dd:a9:14:1a:4c:af:de:08:c7:e4:5d:d9:22:6b:1b:
ca:84:fd:84:a9:8a:97:ca:9e:0a:72:42:3f:49:ad:
44:a5:be:9d:c3:5d:76:30:70:2e:31:e9:cb:f3:46:
58:f4:5d:a4:b7:8d:10:cc:b7:8d:7d:25:6d:7f:73:
66:75:4b:54:7a:c8:5e:cb:b7:ac:29:e4:f4:bd:2c:
24:95:61:28:ce:b7:cc:11:6c:25:61:f9:2f:3e:2a:
8c:96:96:23:ac:77:63:d6:85:f6:5b:d4:cb:5a:18:
4e:2d:98:e5:3a:3b:02:25:48:de:77:05:1c:53:8f:
c0:57:35:38:ab:e3:ec:9d:60:8f:9e:56:7b:08:38:
4f:00:f6:1f:76:e2:f7:70:fc:c0:c6:09:0c:35:b1:
7b:df:30:f1:f3:d2:b6:bb:39:1e:e1:37:13:69:7f:
65:f1:b3:4e:c3:05:2c:d6:43:d7:12:30:d7:40:a7:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:89:13:B9:DC:E5:39:23:70:EC:A9:E7:10:69:BD:96:D4:C2:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
X509v3 Authority Key Identifier:
keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa28::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:87:69:f0:44:a6:2d:ed:fd:aa:6b:9c:a6:2f:74:75:e1:30:
42:14:ca:2c:01:99:cd:40:02:a6:5f:9d:e4:61:5c:d8:ee:aa:
eb:5c:21:46:40:07:9c:8a:d2:be:96:44:fc:23:1e:cb:32:05:
1a:4d:06:5b:2c:a6:ce:2c:97:68:3e:e5:00:50:5f:ef:4e:8e:
45:86:a3:93:be:c9:a8:67:72:01:99:d8:46:7a:7b:af:b0:3e:
19:ef:a2:85:67:fa:3a:3e:16:b8:2e:9f:4b:93:3c:c5:03:c9:
07:31:39:b3:22:db:a8:57:ca:f2:bc:55:84:f3:fb:2e:9a:58:
d1:bc:8b:c1:b0:16:49:68:e6:01:e2:49:d3:05:9a:91:72:cc:
1c:08:21:e2:dd:d9:5d:a9:33:6c:aa:f7:db:46:f4:47:d8:bc:
53:69:91:b3:1f:84:80:ca:85:8a:df:f9:06:bc:2a:f9:53:16:
7e:8b:d7:66:12:bf:f2:5d:a0:19:12:ca:a0:67:a1:45:f6:87:
84:5f:cd:f4:96:65:eb:6f:6b:3d:60:52:69:9d:3e:21:34:e8:
ce:96:05:33:73:a7:2d:09:68:4e:13:8f:e9:f5:ab:eb:0a:19:
49:a9:ce:20:69:2a:6a:67:09:ec:a2:a9:18:4e:71:05:65:7b:
1e:34:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:20 2025 by rpki-client