Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa
File: 75514c49-8cb2-3130-a8ec-908f24fd54e8.roa (raw, json)
Hash identifier: THhIKWvppeEE6qNcS1pWTim7izLaAP/8G5lbYG9p9F4=
Subject key identifier: 08:17:D4:23:9C:08:08:67:D0:0D:C6:8C:0B:71:2D:D6:21:80:14:4E
Certificate issuer: /CN=1eba12ff-c221-4ab3-9aa6-d542d0812543
Certificate serial: 010D0C9F432858487FB5D9BCDB702DB9ADEE2AC0
Authority key identifier: 3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 10973
IP address blocks: 2604:3700::/32 maxlen: 32
2604:3700::/48 maxlen: 48
2604:3700:1::/48 maxlen: 48
2604:3700:2::/48 maxlen: 48
2604:3700:3::/48 maxlen: 48
2604:3700:4::/48 maxlen: 48
2604:3700:1000::/36 maxlen: 36
2604:3700:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d9:bc:db:70:2d:b9:ad:ee:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eba12ff-c221-4ab3-9aa6-d542d0812543
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=1adc9843-2dc1-416c-9b05-4eac9a98e4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:33:14:59:88:ee:6e:e9:4c:e7:6a:d2:ca:
aa:de:d5:2d:84:02:65:5f:b2:af:3b:f3:f8:60:c2:
c1:56:ad:f4:2f:d2:67:6f:b1:d6:88:a2:38:5f:d6:
ca:07:52:46:2a:4e:51:36:22:b6:04:d4:b6:77:c7:
02:ca:f4:69:22:3b:8a:66:d2:ea:4b:d8:fa:ee:ca:
75:71:58:a8:55:9f:41:26:99:28:5b:49:59:9c:40:
e1:c3:e9:2d:c0:78:d7:f5:5b:e5:9c:ef:bd:84:9f:
fe:1b:45:51:53:ac:f2:17:f6:1d:fd:6a:c6:6f:5c:
71:4b:2b:34:5c:c8:dd:d4:60:c1:75:6a:05:72:f8:
6f:4f:81:ff:c9:53:73:4e:8a:2c:45:c6:c0:f1:4a:
03:41:4d:1c:d8:87:07:95:05:5d:77:af:b6:93:89:
89:b2:84:6d:34:29:12:38:93:b9:36:f0:5c:00:bb:
d0:fa:6c:99:d1:64:45:c9:08:d9:dd:4e:a8:e6:cb:
8f:9f:fa:16:3f:5b:7a:28:73:b2:b2:21:0b:c4:e5:
09:55:f2:ca:f4:5e:68:1f:a3:33:ca:48:ee:54:e8:
e6:3b:1d:e5:0d:ed:0b:37:d5:f2:c0:62:ec:87:72:
7a:76:e5:39:60:c4:0b:ea:05:63:fb:79:54:25:9f:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:D4:23:9C:08:08:67:D0:0D:C6:8C:0B:71:2D:D6:21:80:14:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl
X509v3 Authority Key Identifier:
keyid:3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3700::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:06:a1:7b:0d:85:19:0f:d2:e9:94:cc:59:7c:29:c0:36:bf:
90:fa:59:bc:35:7f:29:3b:c7:62:a7:6e:ec:5f:76:48:0b:6e:
43:65:31:43:d1:4e:b4:02:52:b3:8c:3f:56:00:02:73:dd:28:
81:e5:f3:c4:43:d2:10:57:9e:5c:8d:c5:6e:d3:65:ba:8b:ba:
17:4f:3b:b9:c7:f2:af:fe:20:e1:c4:41:3b:dc:64:01:57:c9:
17:27:a6:9b:88:cb:73:aa:d3:22:c4:cd:86:1a:c3:62:01:61:
fc:da:6a:35:4d:c7:e5:7a:7f:cd:62:b1:bc:d5:f5:6c:c0:91:
b3:22:f5:cf:04:9a:b8:c9:44:bd:94:7a:fb:80:ab:a3:b8:bd:
4e:e1:01:d7:9b:a9:b6:20:89:d4:0d:5a:ea:76:74:c9:3f:ee:
3e:77:22:92:fc:a0:a0:d8:46:9a:ef:b8:38:d9:89:92:16:4a:
27:4e:56:f0:3f:90:76:e2:1d:7f:77:8c:dd:1a:fb:70:db:64:
d2:46:aa:6e:92:1a:48:35:25:92:88:96:7b:e7:68:4c:15:b4:
d4:9a:7e:48:9e:06:4e:fb:45:5f:3b:84:d5:58:b9:be:36:48:
26:49:fd:d3:ce:53:08:e3:ba:3d:00:da:ba:87:a8:15:3a:8c:
70:df:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:44 2025 by rpki-client