Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
File: 34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa (raw, json)
Hash identifier: imc55lgYVAqByYDqFKJxt6e82c1lcJWm3kv/evJlDJ4=
Subject key identifier: CE:A7:F2:E7:42:46:74:72:95:C0:10:A5:78:64:8D:62:EF:8B:2C:56
Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial: 010D0C9F4328584838855ED2F88A1BC1A4A56200
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 31898
IP address blocks: 2602:fdaa:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5e:d2:f8:8a:1b:c1:a4:a5:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=c248699e-a4a1-4ce9-afd0-462ce8be8874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:98:70:01:5f:90:fe:29:d5:e4:74:81:cb:
37:12:09:83:de:3c:fb:9e:37:fa:dd:93:f6:52:d0:
6e:73:99:21:e3:e8:32:7e:e9:de:9b:b6:41:0a:97:
d2:3f:7c:d2:c2:11:d0:80:75:b0:c6:a3:58:14:61:
af:6d:5b:b6:c7:38:e5:78:bd:79:b3:38:ba:82:fc:
ca:20:1e:d0:3f:57:bc:9a:1b:24:86:b4:44:c5:4f:
c2:32:73:38:89:e3:d5:67:fc:9d:ec:50:cb:b4:86:
5d:56:0d:ea:fd:45:8a:2e:e6:23:8f:b1:f2:45:0e:
84:c2:bc:d2:fd:e7:ce:d9:a8:ba:e7:d0:57:bf:f5:
67:89:9d:4c:ce:ea:86:17:8c:ea:ae:e5:5d:1f:b0:
21:e4:92:01:5c:3b:26:9b:b1:6b:0d:53:70:98:9d:
44:a9:e7:b6:d7:08:f9:bf:bc:df:03:da:67:5e:2d:
2e:35:27:fb:5c:1e:1a:72:54:e1:09:87:84:97:d5:
70:0e:c2:1b:20:54:eb:51:cc:9d:3c:71:54:6d:74:
65:f1:41:fd:e0:43:55:ec:4e:ad:c2:97:94:40:9a:
fb:72:3d:23:c6:b9:47:7b:ad:05:ff:2e:4c:e8:ad:
1e:03:f4:a0:ce:ab:e5:de:6a:33:c7:c8:cc:54:e3:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:F2:E7:42:46:74:72:95:C0:10:A5:78:64:8D:62:EF:8B:2C:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
X509v3 Authority Key Identifier:
keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fdaa:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:3d:db:b0:15:be:2b:1b:6e:c3:12:e1:1f:87:89:64:74:9f:
fc:d7:db:da:95:63:a5:31:7d:70:90:58:2f:aa:d5:81:de:a7:
1d:17:10:8b:f2:c4:29:27:d5:81:23:09:99:be:7b:a6:92:30:
5c:be:c6:f5:84:1e:70:85:1b:a8:53:c3:17:1a:c9:d6:ee:bd:
95:13:2d:5b:fd:6b:8a:5d:18:87:38:30:a4:3b:16:39:98:24:
29:c4:80:d6:02:2e:76:4f:06:dd:5f:cd:f4:a8:78:1d:f4:21:
7b:95:b5:c6:76:34:70:9f:46:d9:ac:72:7b:ec:e5:a5:78:63:
60:30:9f:a6:07:d5:5b:b9:4f:b3:05:4c:e1:c5:ca:10:9e:c7:
bf:b9:19:d0:6b:66:a2:a5:55:2d:9f:b0:e9:b1:f2:0d:7b:6f:
a0:68:39:47:aa:a2:1e:dc:64:d2:61:87:15:60:ed:fc:3b:0a:
a6:8c:6c:77:f7:50:95:44:bc:f8:e9:4d:cd:a6:86:d6:3e:93:
2e:12:41:14:4e:7e:e2:91:8c:3e:f4:af:16:a8:34:3c:1e:55:
8e:cc:e1:0a:fc:c3:97:57:44:70:f6:9b:4f:da:7a:bc:85:3a:
fc:33:9f:07:4c:bd:e1:32:ac:48:de:93:ba:97:ab:7f:b2:fa:
c5:52:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:59 2025 by rpki-client