Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
File: 43a59a46-c115-3889-8c22-deae7fcbc88e.roa (raw, json)
Hash identifier: rFQuDmFjOWMmzvZKc0g6J/zbrLSdfRMTFbm48Tb/Kv0=
Subject key identifier: 4C:6E:97:23:8A:C3:F1:61:62:2E:BC:2C:F3:41:55:53:50:40:E1:A9
Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial: 010D0C9F4328584832F032DD4EE5EC3F5AF1DF00
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 2602:277:d02::/47 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:32:dd:4e:e5:ec:3f:5a:f1:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=bf1a312d-90d3-4848-a145-bc98e9e72714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:57:ce:fd:27:73:db:4b:41:fd:59:ad:11:
08:89:4b:96:1e:b8:b2:0f:74:73:ee:3d:92:cb:bd:
b1:69:d5:9d:58:16:d9:54:2f:da:36:05:c9:ad:79:
67:83:cb:20:c3:52:2a:ea:46:ac:3f:ec:52:26:b9:
98:ba:68:13:1f:fa:93:4d:0f:fd:69:f6:a6:79:70:
35:a8:24:ac:80:a9:1c:94:a2:f8:ab:86:5a:95:d2:
20:73:14:97:3f:99:8f:d3:2b:4d:3b:5b:dc:67:4a:
b5:71:eb:68:b9:6b:c9:c3:77:03:97:78:72:53:43:
d3:66:34:72:4e:0c:5f:9c:47:b8:ff:6b:db:b4:3d:
eb:c5:5f:f2:2f:d5:9a:bb:b2:65:54:fd:ca:84:e8:
2a:1d:d3:c2:7f:51:00:a9:f5:21:01:38:8f:58:9a:
e4:22:c0:b9:e7:b6:45:60:d3:34:fc:69:ea:a9:5f:
fc:36:6f:31:1c:8f:f0:e4:d1:ff:23:10:16:d7:9e:
44:6b:ce:be:b0:e9:c9:7f:94:da:f3:a2:31:16:b2:
15:aa:87:ef:a0:0f:5c:c3:80:1f:7d:2b:63:62:6e:
de:c5:16:a1:df:38:cf:3b:c0:67:b7:f4:d8:69:14:
02:db:0a:56:29:4f:3e:ed:dc:df:96:ee:4b:0e:b4:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6E:97:23:8A:C3:F1:61:62:2E:BC:2C:F3:41:55:53:50:40:E1:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
X509v3 Authority Key Identifier:
keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:277:d02::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:1b:06:4e:89:73:09:d7:ab:a3:2a:05:e5:f4:ca:5f:38:b9:
44:8e:53:2c:52:e1:de:0a:18:b6:6c:8a:0c:80:da:4d:40:4d:
33:3c:75:47:d8:bf:c6:11:2c:25:76:27:c0:84:c7:85:3d:69:
7e:4b:23:d1:4d:63:a6:b3:92:79:9f:81:15:71:7c:28:2d:16:
1b:c0:98:55:18:24:b3:c5:a1:32:4a:96:9b:b0:92:f7:4b:57:
5a:f9:ed:02:55:2e:02:e2:7f:53:a7:a0:5f:50:6b:ca:c4:99:
a6:b1:57:d5:61:fd:ba:84:1c:9e:a4:91:6d:72:59:b0:77:60:
5e:38:fb:14:cb:6c:1c:6d:97:35:5c:39:8d:3c:f1:bc:39:34:
77:f8:f4:18:f5:72:1c:db:d2:76:69:d4:ee:0a:3a:da:40:90:
4c:8f:7f:06:c9:69:86:7f:2b:db:de:26:a9:24:24:f1:17:c9:
32:2a:df:e7:88:0d:89:4e:2e:e6:5e:c8:06:c6:99:50:87:8e:
8e:af:15:a0:73:fe:a5:ac:60:cc:99:98:32:15:f5:31:77:70:
d4:b2:85:07:56:89:51:5f:de:f9:9c:dd:c2:5b:9b:b8:60:2f:
f8:da:cf:35:0d:be:f2:63:b3:8e:bb:33:b9:b6:48:dc:92:59:
d8:4d:35:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:48 2025 by rpki-client