Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa
File: acfc81bd-39bf-39a7-9219-e815d915a041.roa (raw, json)
Hash identifier: pQrdjc7/3ic6bUKGWPIr64t5OwGPoZQgVymjat+CzDU=
Subject key identifier: AA:89:B6:7F:FF:D6:14:A0:FE:03:C4:EE:8A:FD:00:57:19:01:A8:50
Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial: 010D0C9F4328584837200CE09EBEF72DF3683580
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 38047
IP address blocks: 2602:f83b:a202::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:0c:e0:9e:be:f7:2d:f3:68:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=39bc9fde-2200-47e1-bab6-c816e4d0d380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:50:5f:c4:92:45:35:59:f0:00:de:f7:02:
40:d8:39:94:ad:40:b0:f4:73:b4:40:65:36:d7:ab:
ef:ea:d6:cf:6a:56:a2:7b:05:42:d7:40:04:28:4d:
63:4e:09:aa:cc:24:f6:0d:4d:e4:16:1e:4b:8e:af:
08:7d:15:2f:3d:d0:b7:b1:77:50:95:27:b3:52:1e:
c9:02:8a:b4:1d:ba:ed:a5:6a:3c:d8:22:ed:98:62:
33:4e:2c:c8:10:7c:e5:63:21:0d:8d:61:09:13:c3:
c0:07:68:f7:10:76:69:78:56:ba:78:95:6d:7b:34:
37:7a:e6:46:aa:28:4d:df:f2:cf:9e:34:3b:68:da:
90:5a:22:70:79:b8:d8:26:db:ba:eb:59:87:e2:f6:
32:fb:dc:a2:d0:12:1b:d3:eb:41:ce:44:dd:b3:1e:
5c:04:c1:5d:62:ec:45:61:f4:d8:98:7f:9a:ba:ff:
1c:70:64:93:91:13:0a:0c:6a:27:ce:76:ed:19:41:
8f:82:b0:a4:d7:7e:70:4d:f3:95:93:64:d8:ac:fe:
aa:04:94:22:6f:49:94:26:4b:69:8e:e7:72:c2:63:
5f:9b:c8:be:5a:5c:34:5b:88:5f:66:db:6d:a2:af:
d4:42:ab:65:df:c3:9b:bc:d1:df:b4:c3:3e:56:98:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:89:B6:7F:FF:D6:14:A0:FE:03:C4:EE:8A:FD:00:57:19:01:A8:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
X509v3 Authority Key Identifier:
keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f83b:a202::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:19:04:db:1c:6c:55:cf:0e:59:cb:e5:73:d0:e8:c1:d3:63:
5e:e4:a9:03:09:79:a3:ec:71:27:a7:53:cd:c0:78:e9:4f:b8:
01:9b:df:90:34:53:54:9f:15:06:2b:09:f8:31:cf:fb:e0:cf:
98:f5:e3:aa:9e:24:f9:1a:bc:6e:a0:1a:db:7b:49:ac:cd:77:
02:c9:b3:e6:09:6b:e3:48:33:4b:d4:bc:64:ee:3b:21:08:fc:
79:c5:7d:38:b7:2f:46:6e:a6:cc:f0:06:bb:93:66:64:8a:4d:
b7:fe:51:0f:89:54:10:8f:9e:33:cd:d2:a6:88:a3:56:f8:19:
ec:e9:b6:37:f3:ed:c8:40:c0:13:8e:24:ba:ba:9b:3a:bb:d5:
4b:b6:cd:3f:6a:b2:11:a4:06:34:bd:c4:b6:19:4b:3a:0c:4d:
52:be:3f:f9:11:6c:ab:e4:e9:2f:a4:8c:62:63:2f:ea:d3:5b:
94:21:00:fc:b8:b6:10:0f:2c:a6:af:a7:d0:22:5d:57:c0:d3:
41:8c:4d:3b:bc:98:30:e7:3c:df:76:99:a9:1f:48:f6:24:c5:
97:3c:16:47:7d:ae:19:47:b3:ed:2c:d8:27:25:05:37:92:3f:
7f:c4:31:86:2a:64:6b:1f:3b:f2:10:a6:82:98:1a:6c:96:87:
a9:52:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:28:59 2025 by rpki-client