Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43ecf073-dcac-3ab6-87e0-1b6acb4f96da.roa
File: 43ecf073-dcac-3ab6-87e0-1b6acb4f96da.roa (raw, json)
Hash identifier: 7FxiVfXYs53bPYFzUD0nGv55rh5gWl9k99/PMmwAdX4=
Subject key identifier: 52:F0:44:38:0C:D4:6D:A0:5B:75:E8:E7:CF:A2:DA:E8:C2:99:F1:F2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F432858493FCDC88ABA59C02124FA0B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43ecf073-dcac-3ab6-87e0-1b6acb4f96da.roa
Signing time: Thu 20 Mar 2025 09:24:23 +0000
ROA not before: Thu 20 Mar 2025 09:24:23 +0000
ROA not after: Wed 18 Jun 2025 09:24:23 +0000
asID: 30036
IP address blocks: 2604:2d80:1000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3f:cd:c8:8a:ba:59:c0:21:24:fa:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 20 09:24:23 2025 GMT
Not After : Jun 18 09:24:23 2025 GMT
Subject: CN=21d6c757-31cb-4515-b30e-2b85e6d7ba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:80:0f:f1:b9:36:2b:08:2e:f5:6a:ce:95:
c7:6c:65:13:d3:8e:a8:78:2b:98:d0:28:e2:68:ad:
e9:7b:99:68:c8:02:82:0b:8c:e7:38:a4:92:d5:b4:
bb:ad:b5:4e:b3:30:38:50:e2:f3:c4:1b:6e:46:1b:
c9:ea:25:e7:17:25:cd:ca:6e:da:79:79:87:40:27:
95:33:ee:d5:ad:7b:4f:36:68:0b:d7:37:50:fe:9e:
fd:b4:e2:a2:30:96:78:d2:70:48:c4:65:d3:95:38:
49:73:b7:89:bf:b6:76:c9:c1:48:25:f7:86:1f:9c:
9d:c7:36:44:2c:35:a3:ea:49:6e:0a:66:91:99:12:
fb:c5:06:81:cf:19:59:4f:b4:a0:ad:9b:66:36:e9:
c9:99:d3:31:a0:ae:fb:ea:4e:7d:04:0e:b3:71:76:
ef:0d:6e:6e:8f:5e:e4:23:0c:c0:a3:cb:5f:35:a7:
06:e9:24:de:79:01:4b:2d:cf:56:f1:00:a6:a6:d3:
9b:90:ad:31:b6:ff:68:3b:c0:e6:aa:74:03:15:18:
48:1b:39:85:f7:f8:b1:99:5a:b2:e0:60:b2:14:69:
15:c0:7c:71:9d:6f:cc:7d:f8:1a:f7:31:57:97:b8:
90:c2:f4:be:cd:46:80:ba:21:ca:a7:d0:38:50:4e:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F0:44:38:0C:D4:6D:A0:5B:75:E8:E7:CF:A2:DA:E8:C2:99:F1:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43ecf073-dcac-3ab6-87e0-1b6acb4f96da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:1000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:48:6e:d1:3e:af:cf:78:aa:f4:fa:af:0d:80:f1:6a:90:43:
68:b6:66:8e:4d:14:ac:f0:bf:20:aa:22:7d:9e:58:ce:d4:d3:
85:9a:da:18:75:48:a0:d2:4d:b3:c5:88:d5:67:ab:9c:30:fa:
ee:d0:ee:0e:b0:98:47:4e:3d:3b:86:e4:f1:53:7d:63:3c:2a:
53:4c:9b:99:72:b1:25:9d:f3:cb:d2:bd:8e:b4:0c:99:76:b4:
68:fe:61:f2:99:96:24:20:66:ca:0e:10:15:28:13:0e:88:80:
da:41:84:ea:c5:0d:5f:f2:57:5b:00:76:d9:33:00:aa:d3:07:
fb:79:1b:b3:77:e3:7c:8f:f8:ac:dd:3c:6d:19:9d:17:7d:e3:
b6:29:98:aa:26:8a:af:12:ff:a5:24:56:fe:65:7c:d3:87:63:
97:96:93:8c:a4:f2:80:17:ca:bf:d8:bc:82:10:7e:84:7d:74:
43:bc:0d:d4:07:6e:d2:7c:7e:62:df:17:f6:fc:cf:73:58:bd:
a2:99:df:93:e7:bc:98:cd:0f:f9:ad:20:2d:77:01:c2:60:f4:
d0:1a:9a:db:3f:77:0b:e4:d3:7d:b3:84:61:a8:42:6c:0f:df:
1e:56:3f:a2:1d:29:93:1a:1f:50:5d:4b:27:43:6e:e1:e1:4c:
3f:33:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:35 2025 by rpki-client