Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa
File: 4a943796-c7ae-3193-be9d-cc79adb0f56b.roa (raw, json)
Hash identifier: xsSzXq8L8yvGJlq9dvusGcfzHQHF6AHWdHl3CD1h8Gw=
Subject key identifier: 98:E4:8D:A6:DB:52:84:0E:77:8E:C6:A0:D1:7E:3C:55:34:56:2E:C2
Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial: 010D0C9F4328584827C5451C7DEC987C30755D00
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 200728
IP address blocks: 2602:f9f6:840::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:45:1c:7d:ec:98:7c:30:75:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=c79efba9-fe3b-41fc-87a3-4e1a7a5903f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:70:43:32:9f:38:4a:57:8d:45:d8:07:a9:
5f:39:62:ae:0f:dd:db:d3:ca:ec:aa:74:21:ed:d0:
50:9b:7f:80:c5:e7:f0:c5:b2:ed:4c:c5:85:56:cc:
7b:11:65:74:0d:11:fd:1e:ad:94:b7:18:05:ab:eb:
e2:9b:cf:28:85:39:9c:ca:3a:19:cd:12:49:55:90:
81:1e:3d:ae:99:ef:b1:61:84:f9:91:31:3d:2f:b0:
53:2e:97:ae:82:c3:50:d4:58:29:c5:20:96:fa:a7:
2b:61:9b:60:0f:de:39:de:f5:a6:cc:94:96:b3:86:
49:83:6f:8f:86:f0:ad:c8:b0:eb:ce:c4:d6:25:eb:
a5:13:6a:ef:6d:5f:3f:90:68:8b:da:11:d8:62:cf:
ff:55:b4:c6:62:5b:0b:91:c0:0f:f7:8f:83:67:80:
0b:86:c5:07:00:8f:80:92:77:93:a3:e8:e3:af:b5:
78:0f:be:04:f9:f0:1f:70:53:bf:de:c3:43:c1:a7:
a6:3e:35:b6:6e:35:95:af:28:ad:93:8d:20:b7:fe:
db:ca:92:85:84:dc:af:0e:05:a3:58:83:d9:20:c9:
c1:af:30:c8:0e:33:c1:3d:e1:3f:53:07:ae:5b:8e:
0d:b1:05:79:77:f2:d0:20:e9:96:3f:90:c0:7b:88:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:8D:A6:DB:52:84:0E:77:8E:C6:A0:D1:7E:3C:55:34:56:2E:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
X509v3 Authority Key Identifier:
keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f6:840::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:37:ef:35:0c:cb:90:92:05:72:82:f6:0e:18:97:e7:cd:11:
59:22:a7:24:33:bb:8c:81:79:0d:cc:9e:31:9b:92:fb:03:f8:
75:e4:31:73:ea:93:38:f7:5c:54:f5:8d:ee:71:bf:94:e2:d4:
7e:e5:ee:8c:94:28:de:07:1c:86:b2:4b:35:1e:f5:76:14:f3:
db:e0:17:0b:b7:f4:98:b2:0e:62:f0:26:6f:3e:fd:fd:0f:8f:
02:0c:94:4c:4d:bb:ce:82:e6:b7:87:66:ea:30:63:78:a4:c8:
9f:22:24:d5:52:0f:d9:8b:bf:d8:22:6c:70:7b:ed:39:64:5d:
58:4c:be:68:4c:b8:6d:17:20:55:99:49:cd:bf:4d:8c:a7:d6:
55:a1:84:8c:df:f5:76:45:49:76:56:5d:96:2d:7f:38:30:6d:
05:d7:b4:16:fa:98:43:a0:cb:1e:59:30:21:30:63:b6:95:0c:
44:90:89:4a:48:44:d0:ba:dd:c3:22:74:7d:67:2b:3d:fe:0b:
29:72:a0:18:35:79:7c:9e:e3:3d:63:24:a8:b4:ab:9b:30:36:
d0:3f:83:0e:92:37:bc:72:74:d4:e4:5f:eb:ed:f2:a0:fc:6a:
cf:2b:16:55:65:2e:0b:7a:af:8b:3a:99:9a:4d:99:67:64:f4:
be:04:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:37:00 2025 by rpki-client