Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cb35320-82c8-3133-89cd-bfaec2a547d2.roa
File: 0cb35320-82c8-3133-89cd-bfaec2a547d2.roa (raw, json)
Hash identifier: gjecjM7cG89/y6pCzV4zF70Zvwa8WIA128zQWHppK04=
Subject key identifier: AD:53:B1:A9:CC:B4:50:D6:FA:CE:D3:9D:01:99:0D:FD:D3:2D:4F:52
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C534F0213D74D80E43FF2180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cb35320-82c8-3133-89cd-bfaec2a547d2.roa
Signing time: Tue 04 Feb 2025 11:27:48 +0000
ROA not before: Tue 04 Feb 2025 11:27:48 +0000
ROA not after: Mon 05 May 2025 10:27:48 +0000
asID: 30036
IP address blocks: 2604:2d80:a900::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:34:f0:21:3d:74:d8:0e:43:ff:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:27:48 2025 GMT
Not After : May 5 10:27:48 2025 GMT
Subject: CN=b4ddd2a0-3ac8-432a-8082-0ffd7cff408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:6e:4f:1b:b0:dc:01:08:9e:ce:30:4a:31:
b5:f9:3d:8b:a6:44:56:36:36:8f:3a:37:da:e6:61:
da:04:98:a1:65:94:81:ed:5e:68:c0:19:2c:25:ec:
68:8c:d4:09:8f:44:a5:8e:68:0b:6e:3d:0a:31:c6:
68:ab:d0:0a:26:f4:cd:0d:4d:14:2f:99:da:f8:56:
df:74:c4:8a:d8:f9:13:3b:7a:e1:10:8f:4e:72:fb:
0c:88:c9:c0:a5:1d:0e:bf:77:ec:cb:18:87:d0:1e:
0a:3a:fb:53:d5:c4:ba:39:5a:fd:81:ea:9b:ac:bb:
96:e3:60:1f:e4:3f:ae:49:c3:ab:f9:67:d3:d5:f3:
79:38:ae:dc:a2:8e:a1:c0:f7:94:ae:ef:47:18:1e:
42:d4:bb:48:f2:34:18:b2:76:51:9f:34:44:9d:37:
5c:14:f4:30:94:d4:c2:b2:f3:9d:a1:c8:21:bd:7c:
13:2d:99:49:6d:ef:a2:6a:7d:ac:f4:72:9b:0b:d5:
04:6e:15:33:ad:5b:d6:28:98:1b:f0:9d:70:ee:8d:
46:fd:5a:01:91:16:27:db:10:75:c3:2e:58:8b:c7:
9e:0e:53:f8:cd:96:81:d9:06:e0:a1:6e:40:01:b2:
3a:1e:b3:6c:6c:51:c9:82:ff:42:cf:2c:01:cd:22:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:53:B1:A9:CC:B4:50:D6:FA:CE:D3:9D:01:99:0D:FD:D3:2D:4F:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cb35320-82c8-3133-89cd-bfaec2a547d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:a900::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:f7:5e:ff:62:22:55:82:78:55:46:ad:0f:b6:cb:20:60:b0:
49:b1:99:57:16:55:dd:f2:ce:e4:06:57:2c:61:20:7e:65:b8:
5d:45:1e:26:f2:94:69:8d:e9:43:23:68:4d:4a:f1:e8:28:cc:
60:a9:7f:c5:0b:d6:bf:1b:47:63:7f:64:73:4c:81:28:52:8b:
eb:b3:51:5e:12:51:86:8d:1f:64:b0:5e:e1:65:54:66:14:17:
2b:ff:43:9e:d5:42:49:4f:d5:f1:b0:37:9e:d5:eb:f3:96:74:
86:ad:77:9f:29:5e:d5:a9:2f:2a:33:43:85:81:c1:61:21:ad:
4a:86:c1:54:01:9c:7b:37:1f:f5:46:19:cb:52:72:66:9d:1e:
bc:d6:06:07:dc:56:12:3b:c7:52:48:59:38:d6:1f:13:e1:22:
57:fe:23:88:a3:84:96:af:15:e6:1a:0b:10:34:2d:ea:f7:55:
ea:3d:36:bd:17:8d:79:10:d6:58:1e:ed:74:03:c8:21:a1:4b:
79:d4:dc:71:22:a3:f8:56:bc:4a:98:09:03:50:1b:86:95:b9:
dd:e4:b7:27:39:2c:a3:21:b8:97:8d:63:89:43:f9:fb:3a:90:
01:53:23:16:bd:e7:80:2a:ff:e7:da:44:6c:5c:2a:cc:57:81:
1c:c5:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:18 2025 by rpki-client