Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
File: af24fabb-a446-3593-9b02-7544b4fbbf3c.roa (raw, json)
Hash identifier: NAjyfG9cZhT7acbqTNRvWlQKbpg1ohvlVapc6CIGDCY=
Subject key identifier: CB:40:C6:31:DA:F1:1E:06:3C:52:D6:72:3A:EF:48:E3:49:D9:1F:47
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849011B2D408E5CE40916761100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
Signing time: Tue 25 Feb 2025 22:24:23 +0000
ROA not before: Tue 25 Feb 2025 22:24:23 +0000
ROA not after: Mon 26 May 2025 21:24:23 +0000
asID: 30036
IP address blocks: 2604:2d80:3000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:01:1b:2d:40:8e:5c:e4:09:16:76:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 25 22:24:23 2025 GMT
Not After : May 26 21:24:23 2025 GMT
Subject: CN=135546ac-b3ed-4ac6-8599-a41b88d727fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:2a:56:53:04:63:3c:f3:f0:d9:16:01:e6:
f1:e0:da:ea:3a:2d:ba:65:f6:f6:e2:6d:60:db:43:
8c:c1:14:f2:b2:f3:1e:ff:e2:39:ad:11:cb:45:5b:
d1:02:32:cc:ee:1b:0b:0a:03:3d:38:6e:31:89:ae:
1f:af:d7:81:1d:3f:1f:f7:dd:6e:00:75:69:36:d6:
0a:61:5f:d2:6c:c4:2b:2b:3d:2c:43:f7:e0:98:e4:
2c:e7:6d:4f:93:60:ce:54:fa:36:c0:71:f0:fa:df:
8a:31:70:e4:3b:38:0c:bd:b4:9c:9d:4b:1a:45:91:
18:82:ce:85:88:53:db:83:f9:92:4d:8a:11:a3:95:
b2:63:9b:bc:51:30:9a:78:b0:6e:51:86:f3:53:78:
5b:e2:f8:e6:20:7b:88:c3:56:bb:ee:71:80:a6:99:
7a:87:2f:3e:32:52:6a:2e:39:cc:14:2c:4f:99:7e:
26:1d:e2:f7:65:76:9f:9a:6e:88:df:0e:c9:f0:84:
d8:85:2b:fd:59:a2:8b:63:13:5b:8d:9e:28:f0:be:
84:14:8a:b9:b9:2f:90:59:8f:ad:5d:8c:d0:5a:5c:
19:24:de:d4:0b:70:93:ce:93:4f:1a:10:3a:8c:d0:
bb:1d:e8:e5:af:a3:7c:a5:30:18:ba:8f:56:09:3c:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:40:C6:31:DA:F1:1E:06:3C:52:D6:72:3A:EF:48:E3:49:D9:1F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:7b:b1:b9:8d:cd:0c:9c:b6:55:f4:36:92:b6:8e:d7:8d:63:
bc:36:16:73:e8:7e:de:af:d8:3d:6e:67:a7:3e:e3:d1:c6:2b:
22:80:98:cb:3e:a2:a9:c7:07:90:2f:c9:c1:fe:96:e6:71:73:
4a:e0:8c:50:39:54:e5:70:32:d6:17:fa:51:8f:46:8b:10:99:
c0:4a:0f:f6:f0:f6:cc:71:ca:d5:d8:08:93:f7:e2:96:dc:2a:
fd:36:7f:17:f9:b2:26:22:96:e4:8d:25:10:11:73:f8:8d:3f:
4d:77:4a:2e:81:ad:14:b9:53:1f:1d:be:39:68:04:13:51:99:
a3:9c:25:7d:fa:d5:00:5d:5c:5e:55:99:10:36:f2:73:fd:4a:
2b:75:5b:30:ab:b9:6a:da:40:72:80:bb:ad:d0:9f:2c:61:d6:
6c:07:99:29:70:90:ac:4d:4d:2e:6b:24:55:ad:c9:2f:11:aa:
5f:32:bb:10:1a:85:60:e5:bf:66:b8:09:69:b1:0e:71:1e:30:
cf:48:28:a2:fa:6b:88:dd:57:2e:fc:92:3e:0d:54:15:d6:26:
1b:12:4d:ce:19:c8:61:61:52:57:5c:67:2f:7d:29:4e:35:28:
7d:66:d1:a8:31:24:66:26:25:a5:eb:13:67:19:60:45:9f:63:
14:80:d0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:55 2025 by rpki-client