Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
File: 8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa (raw, json)
Hash identifier: mX739gXQIgMWmFH03u0rfkiiFgebF97OKqKmzLMZZdQ=
Subject key identifier: DB:1F:EA:57:9A:12:32:38:DE:7F:D6:43:4F:71:9C:6F:04:79:84:AD
Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial: 010D0C9F4328584832F02B6F9AAD2A7B54499500
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 20454
IP address blocks: 2607:fe80:1000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2b:6f:9a:ad:2a:7b:54:49:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=bdfe8132-301a-4aaa-a85e-45b436efbcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7e:d7:50:08:e2:ad:2e:4f:18:10:34:aa:fc:
d0:3e:79:73:bd:80:a6:c3:e0:83:5f:2a:38:43:b8:
e7:73:56:17:7c:e5:5d:5a:6f:36:b1:77:71:fe:f7:
a1:87:b0:d6:e1:86:d4:ad:6a:b7:de:83:a2:bf:da:
11:c1:97:6b:0a:ad:17:09:b6:bf:e5:13:34:2b:78:
7d:5e:41:10:d8:e5:b5:22:5b:e4:67:3f:b2:b1:22:
bb:bf:95:68:4b:d7:63:e1:f4:50:0d:7f:52:2a:c0:
53:48:12:8a:b4:e5:c2:71:45:72:59:9d:d6:f9:79:
8d:23:dd:c2:b7:bd:72:2c:5d:fd:b4:9c:bf:b4:9d:
13:aa:c0:7a:45:06:87:85:38:c7:66:78:36:8b:95:
43:ea:82:49:32:bd:41:8b:08:ee:c6:d5:b5:e9:d6:
32:c1:e2:34:ce:24:25:82:e8:e6:50:8c:6d:bf:bd:
a2:6f:78:0f:2f:76:96:1b:ce:fe:10:50:0e:c0:7b:
cb:ef:0b:74:f9:55:0b:7c:d4:d0:76:64:20:e9:9a:
1f:5e:b0:2b:3f:45:21:36:10:7c:48:9a:ee:9f:82:
2c:ed:b6:39:df:14:26:9f:ff:84:e4:d0:3d:68:cc:
ec:a1:22:17:0b:87:3e:6e:f8:63:48:9e:3b:2e:4c:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:EA:57:9A:12:32:38:DE:7F:D6:43:4F:71:9C:6F:04:79:84:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
X509v3 Authority Key Identifier:
keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fe80:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:81:d0:66:2c:8a:ef:0e:5b:bb:ea:84:d4:67:f4:ef:a1:bb:
7f:67:fe:66:3c:5a:53:84:de:11:45:09:c3:33:39:a9:80:a0:
28:1e:db:dc:5f:22:40:cf:ad:9f:cb:b4:f2:ba:55:d8:c3:04:
0b:15:0c:0d:3f:00:1a:fb:2c:5d:c3:88:7e:e0:2e:0a:79:9e:
cf:7e:35:5a:dd:5d:fd:8f:e9:03:76:bc:cc:69:5f:d5:1c:b2:
eb:f9:58:57:31:00:05:d7:8b:f8:48:33:63:a3:37:5b:bf:af:
04:47:e0:ea:3d:d9:ae:da:fb:a0:54:3d:01:5f:23:c8:ba:f6:
12:c5:19:d7:a7:c2:e0:21:49:71:fb:5e:73:be:83:3f:a5:b6:
eb:56:41:6e:86:06:e9:97:ca:d9:dd:5e:a6:53:e9:15:f5:9b:
54:d1:b0:03:cf:ca:b1:99:b2:3b:62:8b:60:6e:20:07:53:8e:
af:7c:ea:ea:2c:30:d3:44:1b:b7:b4:1e:dc:90:ce:9d:bd:58:
6c:b9:45:1e:72:6d:22:d3:b3:f8:7b:47:61:a7:2d:02:76:cf:
b9:5c:be:7b:f3:e8:59:50:83:e9:1c:e8:41:12:57:a6:da:8a:
6a:56:e2:7f:9a:0c:63:77:e0:60:1f:19:64:df:9e:09:5e:69:
6c:6c:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:47:12 2025 by rpki-client