Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa
File: 86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa (raw, json)
Hash identifier: D2Z1H0SwnvFl9uGuhyIzWaWgmZ354rwCbxILWnUFsrY=
Subject key identifier: B7:40:B6:07:4B:DB:DF:CA:3B:8C:DE:37:EB:5C:71:38:3F:20:67:79
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2654B571E9C7B19A8B5BB50
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa
Signing time: Mon 03 Feb 2025 11:17:48 +0000
ROA not before: Mon 03 Feb 2025 11:17:48 +0000
ROA not after: Sun 04 May 2025 10:17:48 +0000
asID: 30036
IP address blocks: 2604:2d80:3a00::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:65:4b:57:1e:9c:7b:19:a8:b5:bb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:17:48 2025 GMT
Not After : May 4 10:17:48 2025 GMT
Subject: CN=2857a4ed-5595-48f5-8cf2-1559515e5c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:56:2e:5a:26:92:ea:3a:85:b6:20:5f:c1:61:
50:71:5a:a4:e7:cc:a5:95:83:3a:7f:7b:a7:68:fd:
ec:7a:89:8e:02:6a:5e:e9:41:82:05:60:c6:ef:5d:
c3:9e:3d:bc:ce:5d:0d:3a:a0:fd:79:17:67:ff:d1:
47:24:3d:52:3b:ce:8d:39:7b:6f:38:81:c0:dd:08:
c1:fc:ff:d7:a4:13:f0:7e:dd:84:60:42:9e:5d:45:
07:02:1b:22:98:d0:74:3e:92:71:d0:d4:03:73:09:
d9:38:31:8c:5c:0b:db:9c:71:b2:ee:df:7e:7f:b4:
30:9e:4c:b2:49:fa:c2:9e:36:e5:49:65:5c:ae:e2:
79:7a:e0:25:1e:d3:5c:0c:81:fd:3b:8a:53:c6:b5:
3c:94:3a:e6:cd:8c:dd:9f:5e:55:9c:64:a2:fa:53:
ea:a0:b1:fd:90:b0:40:40:cf:d3:18:de:12:d9:d6:
cd:a8:aa:fd:bf:27:f1:dc:eb:b7:07:a9:25:b6:44:
34:0c:5b:51:e2:e7:a5:62:5f:93:2b:43:5c:cf:b5:
0e:14:dd:ce:a3:17:45:fd:92:79:d9:e6:96:54:b5:
e4:65:90:2a:50:52:b7:2e:40:1c:bb:e6:90:7b:1c:
26:b2:16:c4:4e:a5:a3:35:fd:13:2d:86:29:b4:e5:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:40:B6:07:4B:DB:DF:CA:3B:8C:DE:37:EB:5C:71:38:3F:20:67:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3a00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:9e:e1:e0:43:ba:a2:50:0a:6a:f2:a8:27:ce:f4:d6:cb:d5:
c8:56:03:59:1e:98:38:ea:b1:62:4c:d0:fe:89:12:05:9f:44:
88:51:1f:c9:68:e5:19:f7:06:25:cd:a7:ab:8d:fa:8e:41:55:
96:74:ff:32:4b:80:66:af:ae:58:3f:33:66:14:3f:45:b2:0d:
42:44:74:ac:24:00:e3:e0:b9:71:6d:74:20:5a:37:b7:47:94:
d5:7c:be:dd:f5:b5:8e:94:4d:45:1f:a1:60:72:d5:c1:dd:2a:
9e:1d:79:a3:20:95:cc:27:bf:6e:04:8d:fe:c6:cb:58:2f:2b:
45:31:6d:c5:8e:b6:60:93:25:88:62:f8:f7:db:4f:30:57:6f:
01:71:49:0b:db:26:70:68:96:c3:08:ae:3d:ae:41:69:be:66:
0c:a8:2a:b0:d1:a1:91:92:6c:47:a4:6e:2f:cf:57:8e:96:c4:
b2:5c:86:f0:55:2c:9d:cf:a3:77:2f:fe:b3:50:51:70:c2:cf:
7a:01:a0:1f:c9:e0:66:26:5a:65:5d:70:ca:74:16:0e:63:4b:
35:31:97:43:8b:2f:9a:c9:3e:25:da:a6:11:95:e8:63:01:d1:
80:ed:4d:b7:6d:2f:22:e8:a0:fa:45:b1:49:a8:76:7b:b3:ef:
ec:56:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:29 2025 by rpki-client