Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/198dd1a6-d765-3a48-ad52-10935522bf04.roa
File: 198dd1a6-d765-3a48-ad52-10935522bf04.roa (raw, json)
Hash identifier: ffCQm3TJku3/1AVY/2l8GWOWfrY1BqGZnrqC54Ta6Dk=
Subject key identifier: D5:E8:04:98:84:A4:15:D0:94:88:7C:24:08:42:E0:5B:82:FE:76:16
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849134FB3EB7F556F14B2FFDE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/198dd1a6-d765-3a48-ad52-10935522bf04.roa
Signing time: Tue 04 Mar 2025 10:54:46 +0000
ROA not before: Tue 04 Mar 2025 10:54:46 +0000
ROA not after: Mon 02 Jun 2025 09:54:46 +0000
asID: 30036
IP address blocks: 2604:2d80:d800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:4f:b3:eb:7f:55:6f:14:b2:ff:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 4 10:54:46 2025 GMT
Not After : Jun 2 09:54:46 2025 GMT
Subject: CN=9be8a4b6-820d-4d9e-9c4d-ae2f20cd7e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:0c:d2:d0:c1:72:31:0f:3b:12:03:db:ea:
08:9f:d4:67:a5:23:cf:64:6c:04:ad:b2:82:7e:9d:
85:ed:79:e2:3b:d9:e7:e5:97:04:bd:90:a2:9a:04:
b7:9d:02:8d:4a:a1:fe:aa:37:34:e0:0e:49:2f:a8:
ed:dc:fe:1c:1b:c1:c7:ed:62:d0:f5:7b:22:68:f6:
40:bb:8a:44:94:7b:ab:a6:e1:33:34:61:29:8c:0f:
d8:d2:f2:8e:93:6c:bf:0d:4b:87:6d:1a:9c:36:38:
13:e6:05:f0:35:17:91:a0:00:ff:c9:b2:75:e3:41:
d3:6c:32:cf:90:5d:08:39:92:53:0b:86:01:30:89:
a7:c1:91:76:0b:3f:0c:22:fb:22:b9:99:0f:a7:f3:
84:34:f0:fa:6f:bb:86:5e:ef:7e:50:82:48:91:d9:
be:2d:98:6c:11:f2:7d:5b:0c:e6:fc:76:c0:32:49:
e6:03:12:cd:a1:8c:5e:fd:02:6e:55:4c:04:ba:3a:
47:b1:5a:3d:01:98:c0:39:df:8d:99:fd:28:7a:19:
ad:7b:7b:4c:cc:16:a6:74:f0:39:f5:de:68:7f:22:
cd:c4:67:70:b3:b4:ce:0c:7e:62:cb:3a:fd:ad:95:
e9:ce:13:5b:cb:aa:d3:55:f8:8f:fc:18:9d:75:bc:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:04:98:84:A4:15:D0:94:88:7C:24:08:42:E0:5B:82:FE:76:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/198dd1a6-d765-3a48-ad52-10935522bf04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:d800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:c1:88:f4:7a:a7:04:4c:80:17:d7:85:a4:dc:ae:9e:46:5d:
8c:41:8a:97:43:91:f0:d8:65:83:06:95:81:3e:85:e0:87:3c:
4c:66:06:cf:d0:d3:56:df:4f:72:15:3c:ce:71:66:bf:a2:f7:
b5:33:4e:46:c5:66:bd:38:fb:95:65:eb:a0:ff:83:09:4d:48:
35:27:8b:1c:96:11:e1:d1:97:6a:b3:ee:f3:b6:62:68:bc:f8:
d7:64:21:c8:d0:59:d7:a0:66:34:2c:f7:ac:34:73:53:7e:44:
5f:27:4d:d0:99:c2:3f:ef:ec:21:8c:17:62:fd:07:02:e6:72:
c4:ae:1e:03:50:78:e0:9c:02:4b:53:a4:e3:e3:40:10:4c:83:
c6:d9:11:04:6a:bb:34:ee:38:c4:f9:cc:75:1f:1b:83:e0:bb:
c8:e7:0d:d6:2a:cc:4e:9e:5f:74:ff:a0:81:1e:d8:3f:1f:d6:
52:0c:2e:1b:ec:34:d6:83:64:a7:a4:14:00:21:bf:34:2b:ae:
2d:51:06:f1:b4:a6:77:6c:8b:34:c7:56:0d:9f:f8:17:a1:13:
61:86:d8:1c:5f:3c:13:3a:6b:ac:58:55:7e:47:10:56:ae:67:
df:f1:a9:9a:bb:bb:c2:50:57:d3:ce:84:e4:43:ab:63:e4:1e:
22:47:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:26 2025 by rpki-client