Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
File: 30e1b526-edb4-3408-90ff-b3883c8f9b14.roa (raw, json)
Hash identifier: wk3lU0cFGnIcARiRuyklCUUKYhsCpF50v1qmGe9wRAI=
Subject key identifier: A5:C1:B8:AB:7C:B1:FE:25:5C:26:C3:65:EC:97:18:1A:CE:B5:C1:C5
Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial: 010D0C9F4328584869606E2E7D5F44730E2F9E20
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 142594
IP address blocks: 2602:f919:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6e:2e:7d:5f:44:73:0e:2f:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=a5e37385-6a50-480c-95de-6477089ebbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:cb:60:b2:f2:cc:d6:51:7a:9f:91:cb:13:
9a:27:c4:e7:7c:a9:cd:f7:5e:c2:1e:19:22:d3:12:
80:1c:cc:79:a0:a8:fb:ed:1c:c4:e2:9f:19:e6:90:
89:5d:4d:98:dd:48:0f:73:df:a9:70:99:7d:83:7a:
fc:0f:ee:70:12:98:2d:31:6e:c8:c9:dd:68:e3:d8:
b3:5f:d2:ea:0e:0e:bb:c6:22:02:1f:1f:58:d9:7a:
3f:22:bb:85:57:17:84:45:1c:e8:a7:4f:69:f2:cf:
c4:ed:6a:28:90:b7:41:1c:59:f7:3e:75:9d:10:42:
5a:51:67:d1:a7:f3:57:be:3e:e5:7d:fd:3d:91:66:
f3:2c:ef:14:e0:60:03:6a:1f:d6:0f:ab:a2:0f:e8:
36:2b:40:08:15:bc:28:b1:47:68:2b:e9:c4:1c:5b:
7b:31:4e:29:4d:b8:40:a3:3d:a2:4c:74:1b:61:2d:
08:c1:ed:2b:53:6c:d1:b4:fa:83:8e:82:7f:31:1a:
f2:e0:95:b5:b3:4a:90:ec:f4:5f:8f:63:67:04:b1:
df:bf:c1:56:e0:a0:21:d7:06:36:7e:16:93:46:82:
d7:49:b0:d3:75:62:02:44:eb:2a:6c:e7:6a:34:0a:
6b:f4:e4:7e:ff:02:e4:aa:01:98:65:9b:d1:7f:e5:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:B8:AB:7C:B1:FE:25:5C:26:C3:65:EC:97:18:1A:CE:B5:C1:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
X509v3 Authority Key Identifier:
keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f919:101::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c8:68:12:6d:82:ce:ff:0e:27:b4:51:0d:04:94:9c:3f:99:
bf:9b:74:da:15:44:ce:55:e7:83:08:28:91:f7:93:ec:24:08:
fc:ee:08:be:15:d7:30:c4:fc:e7:c6:ac:85:70:86:2b:30:f8:
d3:56:47:e5:20:bb:6e:dc:6a:d0:0f:68:9f:37:c8:42:97:d6:
17:0f:d1:40:f2:8b:99:37:b4:8c:86:d3:d9:74:09:9c:b1:33:
f1:ce:a2:e8:0d:f4:90:b8:8b:ef:39:fc:56:69:97:dc:6a:76:
c1:d4:e8:ea:76:82:98:62:bb:7c:da:87:36:65:0b:0b:82:1b:
f8:ed:82:ee:e5:4e:25:cd:24:d8:01:80:08:7f:b9:51:13:fd:
cb:25:27:d0:92:42:c8:83:71:3c:91:62:33:23:49:91:52:c4:
f2:7a:e8:82:6e:ba:ce:57:2f:31:11:81:47:11:8e:09:32:20:
bc:a5:ee:fb:bd:3a:0b:c3:d0:93:01:4e:b5:97:d3:31:57:70:
a1:eb:3a:2c:92:b9:98:04:d8:32:c6:da:98:c4:a8:ff:da:35:
11:f8:15:0f:8d:6b:ea:09:a8:3e:92:70:71:a0:1a:56:c4:91:
ed:0f:1f:0b:32:c2:09:e2:a9:20:f8:45:52:4c:35:fc:41:c8:
85:a0:20:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:53 2025 by rpki-client