Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa
File: d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa (raw, json)
Hash identifier: XsU0gps23CjzsIap2N4EBUytUA4YMTXEbddhIDqxKgM=
Subject key identifier: 58:BB:37:2B:C6:1D:2E:8B:A0:B0:67:EE:67:99:3D:19:31:6C:6B:28
Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211
Certificate serial: 010D0C9F432858485CD0289024BABEC969D09C50
Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 399825
IP address blocks: 2602:80a:3000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:28:90:24:ba:be:c9:69:d0:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=c3cffaa9-8229-4da2-8b5f-d91af60a9513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:41:65:77:e9:7e:b0:dd:fc:52:9f:94:4e:
5b:eb:de:de:57:3d:94:d9:bb:e7:b9:37:57:ac:0d:
b5:d6:4c:27:c5:8d:81:00:b6:f0:a3:19:34:33:a8:
ab:58:70:25:ef:af:ac:0a:f1:84:c4:b3:4d:2f:b0:
1c:08:eb:e9:a2:10:73:1d:45:32:d1:8e:6f:ed:b1:
e9:13:fb:55:b9:81:a8:15:5c:c7:b1:bc:43:64:6c:
50:29:29:ad:82:67:4a:08:2d:26:42:eb:e2:96:ad:
64:61:dd:77:fd:fc:7c:00:12:a9:69:86:7d:78:94:
fb:5c:2c:1f:b2:20:f8:55:8e:07:a0:5d:6e:da:d2:
34:00:2e:1c:53:19:95:14:9c:dc:2f:d9:7e:31:23:
11:6a:b3:a2:91:67:c4:5e:bb:c5:97:17:0d:34:37:
b3:cf:58:2d:0f:36:41:12:1c:2b:08:b8:68:26:a9:
6e:29:cd:9c:d7:b1:33:b8:cf:97:28:d3:80:1a:be:
cf:8a:63:37:ac:b8:68:c0:d4:a0:49:02:06:1d:7f:
af:d3:ff:1d:84:ef:f9:01:3e:33:bb:9e:b8:11:bf:
68:16:c1:a8:bd:85:de:a1:f3:22:f1:35:6a:c5:47:
4c:4a:f3:62:b4:2f:59:9f:b8:58:db:de:b6:d1:cd:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:37:2B:C6:1D:2E:8B:A0:B0:67:EE:67:99:3D:19:31:6C:6B:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl
X509v3 Authority Key Identifier:
keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:80a:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:30:c2:4e:4e:7a:48:09:80:16:69:52:ba:81:96:97:dc:bf:
86:d3:05:a3:fd:ea:16:a4:4e:b4:42:fa:8f:59:51:7e:95:e5:
c7:2b:7c:00:cb:c3:c8:1c:b7:8e:0b:a1:d0:00:26:ec:46:0a:
81:96:0d:ef:8c:37:61:30:2f:59:f7:56:1e:5c:8b:8a:d6:58:
67:7e:8e:b3:1a:4d:e7:db:6a:eb:af:be:ec:5e:13:04:5e:40:
96:af:46:53:d1:de:9a:ba:44:b5:6e:d5:d9:3f:1c:a8:36:ff:
1b:5b:ab:06:f0:e2:9f:7c:b9:ba:99:5f:15:17:62:8d:19:6d:
36:3c:4e:fe:87:2c:c0:44:12:45:c8:6a:d3:54:37:0f:a5:ac:
31:f9:a7:e3:18:95:ec:a0:87:b5:81:e2:24:d5:f3:66:f0:0c:
f5:8d:04:61:1b:cb:04:5a:4b:90:b4:50:26:e3:bb:31:be:90:
d5:56:07:5f:fe:53:b3:ae:8b:e8:80:fc:ca:89:a7:c3:63:c5:
50:28:53:df:42:0b:d4:e1:32:d6:e7:63:4f:7e:7e:4d:2c:e1:
28:79:31:c9:5a:b5:da:ee:44:ae:bd:91:11:69:a0:cf:44:d7:
22:43:d7:c4:bf:63:c8:58:a0:5e:d2:f5:ab:da:3e:e2:ab:bb:
6f:b4:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:06 2025 by rpki-client