Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/8f3fcfac-6ac4-3058-91ff-2b963f3233dc.roa
File: 8f3fcfac-6ac4-3058-91ff-2b963f3233dc.roa (raw, json)
Hash identifier: OLPp05UPz8JtKo9jzCX8TpV0ETMFBjArHjf5khaAX4c=
Subject key identifier: F9:8E:4D:A0:97:EF:51:54:1E:CF:00:6D:08:84:DD:97:FC:79:93:D0
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F432858486AC599E4B40028637A285F80
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/8f3fcfac-6ac4-3058-91ff-2b963f3233dc.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 26341
IP address blocks: 2602:f9e7:10::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:99:e4:b4:00:28:63:7a:28:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=4851e411-1690-40fc-bb1f-7aed6acc7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:5b:96:0e:e1:7b:b4:f8:f6:24:01:0d:09:
dc:16:31:b2:40:57:b3:2c:6c:f1:64:f8:aa:a1:24:
6f:52:ac:3b:b5:c6:9b:ab:c8:b7:63:f3:12:d5:c9:
aa:03:c4:49:29:75:42:d9:d6:46:6c:1e:c4:5b:6e:
fd:9f:f0:16:d5:80:d8:c6:db:ea:2c:03:4c:1d:33:
00:73:b1:ea:66:e7:66:24:12:ef:a1:0c:c4:38:55:
9e:1b:e6:80:03:9a:77:75:bf:b3:54:de:9b:53:0b:
8d:07:d1:47:ee:b5:cf:33:f0:e9:34:f2:4c:a6:e8:
72:19:46:eb:5c:a1:76:85:a7:b1:c0:48:50:d9:90:
35:1f:b7:24:a4:37:c6:1d:f1:9c:db:75:4c:7a:34:
06:33:3e:ac:65:5c:ec:ff:04:88:1c:51:65:9d:a0:
4a:e7:57:e1:75:6a:e3:80:d8:87:89:02:76:a1:c5:
11:8c:db:51:09:f1:dd:5f:34:f3:ff:7a:41:8d:12:
eb:04:ab:3c:ac:78:23:3d:ee:ef:a7:af:ae:71:da:
fe:9b:03:7e:3c:ed:ea:13:f0:35:5a:bd:b0:39:c6:
07:80:36:74:3f:f3:dc:0f:37:3e:a9:b5:bf:c3:44:
a4:90:65:e0:ab:1f:f4:55:7b:eb:8f:4b:e0:c9:1e:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:4D:A0:97:EF:51:54:1E:CF:00:6D:08:84:DD:97:FC:79:93:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/8f3fcfac-6ac4-3058-91ff-2b963f3233dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9e7:10::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:69:92:b5:2d:c2:02:ab:41:a8:f8:15:6d:fb:2c:2a:c0:67:
9b:fa:80:15:1c:85:ac:f7:ff:25:f1:40:48:a1:fe:07:e2:19:
ab:d0:08:4d:74:e2:e8:d4:45:58:68:1a:fc:4c:d7:3a:a7:e4:
08:33:b7:69:36:8b:ce:fb:5d:f2:3a:5a:8c:91:d6:6b:b5:ed:
91:ca:62:11:79:05:08:8f:32:ae:69:e3:51:49:3e:64:ba:60:
76:64:96:32:e1:40:65:33:dc:5e:da:40:ca:c9:94:c7:61:d5:
c2:5b:19:b7:12:e5:b1:46:2c:0c:1b:52:5e:37:b6:e3:8b:04:
8f:a2:7d:e9:a6:ca:57:ce:49:ce:f4:cc:6c:01:59:7f:a0:28:
87:f4:4e:04:98:1c:86:ec:f6:12:22:c9:be:80:f6:7e:7b:f9:
00:57:a8:dc:73:f3:a7:71:1e:4b:fa:c2:16:51:c8:03:44:bf:
b1:1c:cb:96:77:e0:4d:cd:c7:dd:a4:69:5e:8f:cf:0b:e6:f3:
03:3a:78:86:da:c0:36:aa:9c:1b:94:8d:76:6c:8b:33:d3:d1:
9d:d5:5f:d3:28:db:77:57:d4:eb:31:cc:63:99:ee:81:29:0c:
0c:08:6f:f3:51:91:93:bc:0e:bb:88:ac:4b:f0:44:06:21:45:
18:24:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:15 2025 by rpki-client