Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa
File: d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa (raw, json)
Hash identifier: sJEIvl20O4D/6lostALO7KcernDN8yp7q2oswMfA+p8=
Subject key identifier: 66:AC:5B:54:CC:1A:0B:C1:C0:11:53:30:46:C3:08:91:CD:23:9B:CB
Certificate issuer: /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial: 010D0C9F4328584863CB16E1A2EB7A88D131EAC0
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 14618
IP address blocks: 2602:f86e:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:16:e1:a2:eb:7a:88:d1:31:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=403a136d-8aa8-4b44-9d2d-3a3302ccec0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:58:45:5b:0e:3f:cf:b4:6a:65:21:6d:fc:
96:ff:b9:42:a1:de:34:af:a0:ab:4d:3b:e9:5f:82:
60:20:b8:af:9d:af:97:e2:29:b1:ee:a7:29:5d:e7:
1c:98:b3:35:e0:26:0b:40:af:ba:38:31:53:d2:e8:
9e:cc:c5:61:ec:8a:07:20:bd:1d:87:fa:3a:b6:6e:
0d:88:3c:4b:5a:6d:10:54:6c:74:cf:29:50:c7:80:
7f:ff:d2:13:54:2f:ab:a4:7b:ef:ef:f3:67:32:e3:
c8:7c:65:e9:0a:2a:4d:e1:29:b3:77:b8:6f:50:a3:
d5:94:4c:9c:fc:fa:fe:58:9c:27:90:40:7f:6c:88:
95:f8:d6:57:63:9f:a0:f5:02:5c:e7:e2:51:2b:f1:
d2:3c:ab:4c:f2:e5:c9:c1:32:69:67:63:fa:10:0c:
52:36:fe:11:21:40:d3:6d:b9:fb:b5:79:94:44:1c:
34:5a:82:1e:7d:42:03:67:4a:f5:21:18:f0:14:54:
fb:e9:6f:7e:0a:33:41:55:41:c6:8e:b9:c8:bf:22:
a7:00:1f:34:b9:e6:e3:e8:7e:d9:97:da:10:2f:28:
ce:6d:91:61:ea:b5:d2:11:82:a1:f1:51:84:cf:9d:
93:2b:5b:1c:af:44:bc:0a:49:30:f5:b8:5d:50:f4:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:5B:54:CC:1A:0B:C1:C0:11:53:30:46:C3:08:91:CD:23:9B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
X509v3 Authority Key Identifier:
keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f86e:102::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ab:02:bf:65:e1:f1:3b:01:66:1b:4f:28:4f:a0:36:35:cc:
d4:a8:f6:22:7e:30:c0:51:36:91:1e:c9:61:9c:44:95:7a:8d:
0c:f4:2b:e9:d8:bb:65:af:ca:d9:72:3b:58:af:d9:ad:5b:2a:
d8:23:ab:a9:00:7f:ad:64:6a:0c:24:45:31:a1:55:c7:05:3e:
8b:97:59:52:1d:23:f3:32:59:e8:50:22:bb:f8:93:5c:ac:4c:
e1:ff:a5:18:1e:e5:98:73:03:29:98:22:76:df:79:62:47:67:
b5:28:9d:ce:4c:2a:09:68:1c:ef:c3:8a:e4:6c:58:34:d9:2a:
00:d3:00:0d:a0:0e:ea:09:ab:6c:de:8d:c2:59:94:bf:ce:66:
ca:dc:24:d8:3c:91:c1:5a:32:d0:f9:f4:13:e4:a9:61:4b:49:
73:ce:49:67:5f:45:32:b2:00:52:f6:65:ce:4f:38:fd:13:cc:
9b:b9:f9:83:22:ba:e7:c9:7d:eb:36:9b:f3:c9:29:5a:7a:5b:
cb:ef:8f:52:f3:38:89:4d:2f:4b:0a:49:a6:b9:02:0b:2d:84:
43:ec:6f:8e:a8:a0:5c:c4:bf:ec:b8:8a:c0:be:6f:19:c3:f3:
8c:3a:e7:17:b6:73:b2:7a:ce:e3:ad:64:b7:e8:27:53:ac:ff:
a0:df:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:21 2025 by rpki-client