Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa
File: be6ecf73-2cce-3a8a-91e8-23664e521e04.roa (raw, json)
Hash identifier: hm9VthY5U/PYwGUkeCnPH4eUIQ9GKLvtdvjJbdOit00=
Subject key identifier: C2:65:4A:A8:CF:E3:AD:A7:66:21:28:D6:77:C7:60:E6:AD:68:62:FF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55925B11FC8104170D457C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa
Signing time: Tue 04 Feb 2025 12:40:45 +0000
ROA not before: Tue 04 Feb 2025 12:40:45 +0000
ROA not after: Mon 05 May 2025 11:40:45 +0000
asID: 30036
IP address blocks: 2604:2d80:2180::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:59:25:b1:1f:c8:10:41:70:d4:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:40:45 2025 GMT
Not After : May 5 11:40:45 2025 GMT
Subject: CN=aa72adae-b130-4d27-949d-5c0049effd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:03:2c:24:8b:91:30:d5:ed:39:6c:66:ed:
b4:97:2a:d6:6f:71:0f:c9:06:28:f6:0c:c0:81:eb:
c0:27:39:4d:96:c4:ba:4c:c6:87:b9:27:a0:ea:25:
1e:86:80:2d:84:65:8c:32:a3:6a:a9:9c:b2:8f:40:
6f:64:f9:bf:b8:4e:f1:23:31:4e:92:cb:43:76:c2:
53:01:1f:d7:4c:3c:88:6f:78:6b:f0:6c:c5:00:45:
a0:03:d0:16:d3:10:00:e0:4f:be:71:c8:c5:7a:f9:
be:47:29:e6:af:7f:2d:58:49:34:6a:83:89:21:de:
71:18:cc:04:2d:5b:dc:f3:4f:60:51:62:40:f2:e8:
e3:6f:35:2e:84:57:86:5d:5a:13:1c:37:44:5e:95:
72:15:de:aa:57:9f:ed:8d:f7:4f:cd:f6:23:34:65:
06:76:9c:a0:cb:69:f6:ec:0d:ef:bc:14:a8:e9:27:
21:8f:54:0c:02:01:48:4e:f5:4b:f2:72:23:78:67:
18:de:a4:10:5e:39:0d:a1:fb:0f:89:02:02:78:3a:
50:a7:88:2f:45:5b:70:d9:15:9f:89:70:b0:01:50:
3e:d5:26:7d:ed:d2:91:c2:b3:41:5d:4e:d0:e7:41:
77:7a:c4:d2:9e:d0:b7:5a:39:07:8a:5e:bd:8b:fa:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:4A:A8:CF:E3:AD:A7:66:21:28:D6:77:C7:60:E6:AD:68:62:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2180::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:bd:5a:03:9a:a6:6e:1d:09:ec:9a:c4:43:e4:d1:0a:e7:28:
b5:62:1d:99:c7:30:5b:02:06:3a:d6:6b:aa:1c:d0:8e:5a:86:
a9:8d:60:95:bf:13:a2:b0:e3:13:5f:09:9f:35:57:04:1b:41:
7f:60:06:d0:3d:0e:bd:55:e0:c2:13:f8:d7:5c:05:60:be:5d:
0f:e7:b1:97:93:95:cf:1c:97:6e:42:01:b7:6a:58:7b:d5:b8:
24:0d:ea:be:f4:5e:ce:ad:1b:52:a1:e2:08:78:20:fc:b0:33:
76:fe:d1:f9:89:af:a2:16:5d:7d:d4:9d:ed:55:b1:a8:66:1b:
b8:e6:fc:8d:56:74:51:4d:88:32:0b:ee:fd:53:e8:a9:1d:88:
3b:82:bb:69:75:24:a7:ba:18:1e:8d:6c:c0:09:41:25:6b:ba:
6a:db:8a:27:d5:98:ec:c8:fd:2e:e1:ab:cf:50:53:7a:0a:6e:
74:e3:5d:b6:8e:e9:e0:6f:3a:5f:15:a0:45:4d:d9:d2:10:d4:
22:a0:4a:ff:32:be:31:91:b1:84:7f:bc:c9:39:8a:13:25:38:
42:ee:32:6c:43:4d:d1:78:d1:c0:a2:0f:1d:f3:24:93:5b:fb:
58:93:da:72:0d:60:ae:11:49:a8:32:7d:9d:b5:20:a3:f2:9d:
d2:47:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:29 2025 by rpki-client