Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa
File: 81f40de9-e302-3803-82c7-d50a229618c2.roa (raw, json)
Hash identifier: EbSsTTuyN4rQ8ChS7gZm3+b+fOLtOdjcsZMSrRwgMLI=
Subject key identifier: 73:A8:B8:DC:31:BD:8A:30:B9:DC:31:06:F0:D3:46:A0:33:88:DA:D8
Certificate issuer: /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial: 010D0C9F43285849350EAE96239C85C8A84ECE58
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 399989
IP address blocks: 2604:3540::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ae:96:23:9c:85:c8:a8:4e:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=09b74956-3fe2-4de8-a671-c29ccce5a3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:23:26:1b:82:5e:dd:65:b0:ac:56:81:02:
d9:c9:fd:27:2a:60:a9:ed:63:42:6e:ea:5f:5e:23:
e3:98:04:f4:aa:da:45:4a:d3:4f:ee:ce:97:b2:4d:
ac:74:90:df:db:21:01:73:a2:be:74:43:8c:25:c4:
e4:d9:05:2e:9e:ba:6a:92:f1:ae:7e:08:77:c1:df:
34:c9:85:c8:47:ce:d2:b9:06:56:63:b9:d9:6e:6d:
4b:36:07:20:06:9d:3e:4b:0f:ad:73:d6:87:77:03:
a2:1b:ed:69:06:4a:2e:22:e3:71:9e:c4:64:5c:30:
7f:f5:1d:81:bc:3b:03:2d:69:11:90:65:46:35:8a:
a9:68:eb:0d:70:08:b8:c0:38:91:a8:75:8b:20:07:
ff:fd:d0:cc:0d:d4:07:93:c1:fc:46:dd:6a:4b:1f:
95:ec:ac:86:be:17:06:99:6a:76:70:d5:a4:ea:ed:
f6:c5:87:97:4b:e2:a9:a3:83:d6:e5:b4:1c:71:41:
1b:b3:c9:58:e5:a9:93:10:08:d5:85:86:aa:2d:3a:
8e:9c:67:b7:00:98:c2:e6:f2:61:f2:70:cc:86:30:
1c:b3:31:73:14:55:f0:00:21:f8:5a:96:2a:b0:ab:
9c:37:84:58:34:ab:de:b2:78:29:b7:15:9f:88:55:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A8:B8:DC:31:BD:8A:30:B9:DC:31:06:F0:D3:46:A0:33:88:DA:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl
X509v3 Authority Key Identifier:
keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3540::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:48:23:b1:dc:bf:c7:dc:76:83:73:e2:40:87:1c:f5:42:97:
7a:52:6e:d5:60:a4:1d:36:d1:c3:a1:85:29:34:9f:e2:31:8d:
3e:9f:2e:76:b6:96:5a:6d:35:17:80:2e:09:22:c5:28:55:46:
c4:7d:78:ca:dc:52:dd:5f:31:d0:73:e5:46:e2:9f:02:56:81:
dd:c8:a5:44:14:d3:25:41:5c:b7:d6:30:1b:83:bd:97:ea:a9:
cf:5a:67:46:ad:b7:ef:38:07:49:d6:5b:4c:0a:12:89:91:20:
ec:c1:f0:56:d0:fa:be:12:b6:0a:ca:76:0a:94:9b:59:ba:15:
3a:3f:c9:9b:4d:c5:a8:d8:d9:07:e1:1a:65:a2:b1:17:e0:de:
6e:f7:bb:bb:75:82:f1:07:f7:3a:d5:ac:7f:37:1b:77:54:39:
60:16:04:8f:22:35:26:74:77:d7:b4:e5:19:26:2a:e7:d8:30:
c7:21:d2:a6:4f:59:f5:53:aa:04:eb:a1:f7:da:5c:43:00:85:
e7:b0:e5:3c:d0:9c:b9:a0:e0:2c:52:56:03:16:22:bc:60:2a:
7c:18:9b:a3:4b:4d:08:ee:d8:38:bd:9d:dc:3a:ad:b3:1c:1b:
cf:e6:f6:12:62:bf:2f:90:8b:39:a9:8e:e2:3c:8a:cb:62:2c:
5d:60:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:25 2025 by rpki-client