Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd0dc206-541a-383e-948f-07f0448fbf1d.roa
File: dd0dc206-541a-383e-948f-07f0448fbf1d.roa (raw, json)
Hash identifier: GC9yf1YAQZn5smmhFB+PPG3Ay/O1d8X9v+caxwRgC0k=
Subject key identifier: 1F:C8:8E:6F:3C:89:F7:0E:A8:13:2F:0B:64:A9:59:8D:52:B3:A8:6D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285849124700917C25E33E9E599840
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd0dc206-541a-383e-948f-07f0448fbf1d.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397233
IP address blocks: 2610:a1:3000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:00:91:7c:25:e3:3e:9e:59:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=f56b861e-61a6-40f2-926f-9f17dd5f26e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:4c:6e:25:ce:5b:77:bc:63:91:f3:eb:b2:
b5:c1:ad:75:7a:35:bd:3e:45:d2:1c:f5:d2:2c:90:
a9:6f:ea:f3:36:dc:81:76:4e:2f:fd:c8:8d:25:62:
fa:51:72:ca:a6:63:d0:d5:c9:54:e2:d9:b5:bd:b3:
03:c7:a1:f1:60:6d:32:3d:66:51:6d:2b:8b:70:f6:
f5:75:76:fd:68:a3:19:fc:ba:1c:72:67:60:b8:0d:
1a:6c:cf:3f:9a:ed:07:8f:97:08:fb:75:a8:8c:73:
27:4f:45:35:07:ec:2c:de:ce:00:ad:a2:23:d1:2f:
f3:d9:81:98:24:ad:2a:f9:bc:a3:19:d7:77:c3:99:
34:ab:d6:4a:69:69:74:49:ae:b6:9f:0f:e3:23:31:
be:c8:5e:71:af:d1:05:f3:5d:7d:17:f3:a0:11:b2:
65:a4:b3:a1:b7:cb:9b:c2:a8:40:3b:ed:4e:46:77:
c9:2a:fd:14:03:5d:f9:ae:e9:10:3c:96:fc:39:21:
f8:c9:36:9b:9a:cb:7e:10:a1:85:94:d6:8c:2c:f6:
1e:4c:7d:a3:1c:aa:c5:d3:d4:01:43:fc:11:3b:97:
58:be:b4:26:4d:fe:dd:24:a7:cb:2e:e2:51:bd:eb:
f8:b6:c5:ed:8e:96:7d:7b:41:cf:3a:de:4b:0e:f2:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:8E:6F:3C:89:F7:0E:A8:13:2F:0B:64:A9:59:8D:52:B3:A8:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd0dc206-541a-383e-948f-07f0448fbf1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:a1:3000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:9a:75:42:cc:d0:51:f3:3f:10:0c:6b:14:d8:a2:b1:d1:38:
48:a1:ba:02:7c:83:db:da:7b:68:98:18:fb:d3:53:27:a6:19:
9a:d3:5b:0d:c1:34:5b:30:33:a7:d5:2d:dc:20:ff:6d:ef:35:
0c:34:7f:34:b0:48:d0:cf:e3:fb:ea:5c:b2:35:71:8a:f2:b6:
5d:2d:79:a8:b8:49:fb:9b:89:c5:36:47:98:5d:af:f3:63:dc:
9d:b2:c3:97:6e:bb:b1:e5:48:a0:de:8b:f9:2e:9e:a1:6e:df:
68:fb:9b:c7:a9:75:3f:8d:7a:93:a4:ef:47:35:b6:8c:7e:fd:
e4:77:83:c7:ae:73:d7:04:72:50:2b:15:2b:6f:2b:24:9b:45:
44:d6:bc:d1:63:60:81:ea:aa:32:a3:c4:45:ea:6b:a8:13:f9:
c8:b3:04:e4:e3:75:bf:e4:0b:d3:a7:c1:1c:d0:e5:d3:b3:2d:
3e:ab:ea:1f:56:26:ad:fe:c1:a3:a5:d5:ba:32:4b:29:61:64:
0a:40:a2:0b:de:e1:20:76:aa:09:50:60:de:f7:cc:14:6d:9a:
89:e2:4c:59:21:0d:ca:7d:e1:16:c7:54:31:0a:4f:7d:a1:d9:
a4:8d:3f:8d:56:9b:51:fd:ae:cd:00:b4:f3:b0:e4:57:5e:e3:
54:ac:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:00 2025 by rpki-client