Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c9e6231-3070-3b28-847b-f442f0db1c10.roa
File: 2c9e6231-3070-3b28-847b-f442f0db1c10.roa (raw, json)
Hash identifier: qtQ7g6JzMTbySSbmvCaF8cUGnFCCVeIQtacHbwSHZ0s=
Subject key identifier: E0:B8:D7:0D:6B:D8:A8:B6:A8:94:FE:F6:3B:54:31:36:EB:B9:4B:F8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848E00F433DE9A5D5C268D14D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c9e6231-3070-3b28-847b-f442f0db1c10.roa
Signing time: Fri 14 Feb 2025 02:18:43 +0000
ROA not before: Fri 14 Feb 2025 02:18:43 +0000
ROA not after: Thu 15 May 2025 01:18:43 +0000
asID: 30036
IP address blocks: 2604:2d81:580::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:0f:43:3d:e9:a5:d5:c2:68:d1:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 14 02:18:43 2025 GMT
Not After : May 15 01:18:43 2025 GMT
Subject: CN=df0dd05d-7d5e-4884-8ba3-29e4a1d4a1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:f1:eb:aa:76:85:00:39:31:c1:be:8e:f0:
0a:aa:0a:04:19:04:da:57:59:eb:2f:f2:18:53:e5:
09:fb:7d:d4:93:ea:5e:ed:7d:27:18:2a:35:ff:d6:
20:98:e5:a0:b0:99:61:6e:d1:c3:b5:2c:e4:53:32:
ad:d5:7c:fe:c7:99:0e:ec:04:1f:00:9f:79:13:9e:
6c:ad:23:60:d5:17:6d:20:f4:5a:f4:73:b3:6d:34:
21:d6:1c:02:22:3f:34:cc:b9:00:e6:e2:53:49:f0:
e8:ef:ad:96:4a:2f:80:17:a9:78:4b:c3:3c:4d:3b:
9c:76:31:78:0c:bc:fb:a7:37:2d:1b:1d:ef:bd:48:
0a:9b:4e:4a:c0:75:53:6e:25:01:47:58:f3:43:eb:
ba:4c:78:7f:a1:45:f7:df:12:20:09:61:1e:bb:4f:
53:b0:37:fe:fb:0f:cd:38:dc:e0:df:66:b1:3d:bc:
c1:59:f9:cb:5e:26:ce:d1:15:9b:56:12:ab:01:dd:
ba:d6:ae:04:c5:c3:05:15:b7:ea:90:b6:63:a2:99:
93:66:38:49:ad:11:c9:bf:5a:d7:09:38:46:b4:d1:
23:0f:d9:f3:ee:f2:78:76:9e:0d:d5:71:c3:2b:b0:
da:70:7e:95:b6:7b:50:cb:a6:e6:c5:9d:ec:38:25:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B8:D7:0D:6B:D8:A8:B6:A8:94:FE:F6:3B:54:31:36:EB:B9:4B:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c9e6231-3070-3b28-847b-f442f0db1c10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:580::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d0:a6:ed:3b:a9:4e:2e:92:16:85:5f:5d:0c:6d:9f:de:8b:
87:4f:3c:8e:7a:5b:6b:b9:f6:a9:81:e1:29:62:9c:be:76:69:
e4:3b:67:75:bb:31:cb:79:78:c9:d1:8e:b6:76:7b:ad:9f:2f:
72:74:26:22:f3:e8:3a:fc:a2:b9:a2:7d:86:a3:14:56:63:60:
69:81:c8:11:74:e9:bf:e9:1a:17:75:3f:7a:2b:42:62:08:61:
a2:ce:b0:5d:82:59:08:19:6f:64:a7:92:00:9c:56:41:b1:6d:
c3:0b:63:c1:99:53:7f:86:8f:d3:be:bf:ea:f1:b0:42:67:39:
5b:ae:7e:6b:1a:78:47:5b:ca:87:e0:c6:89:ba:d7:e6:89:35:
dc:7b:82:59:b1:93:20:92:a7:74:97:47:e1:dd:96:83:35:bd:
fd:ba:fe:0c:6d:c5:47:b1:c1:01:d4:09:12:be:d5:7b:b1:64:
96:76:fc:67:64:df:19:14:4b:f3:d6:d6:98:fb:2b:bf:69:7f:
5f:de:50:fc:43:56:b7:b4:a2:e5:0a:4e:3e:0b:cb:2d:2b:b4:
29:ef:df:a2:82:78:de:ec:d9:de:ad:e4:f0:2f:b7:eb:4e:19:
cc:81:82:bc:51:6d:0c:68:e7:46:37:0e:02:3c:6e:0d:6f:73:
61:1d:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:09 2025 by rpki-client