Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/477df26a-f883-38e0-9179-7c7a5beac663.roa
File: 477df26a-f883-38e0-9179-7c7a5beac663.roa (raw, json)
Hash identifier: gD7Zmf5rww5Enb6G2vAIfFMtc51AV7aiPqWUB8sk/qw=
Subject key identifier: 62:3F:DF:D5:86:7F:18:B4:80:26:6F:5A:CA:F8:CE:2B:8E:9D:3B:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0C2F7A4C5117243A670C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/477df26a-f883-38e0-9179-7c7a5beac663.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 2601:807:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:c2:f7:a4:c5:11:72:43:a6:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=a6186cb1-fa21-41e4-b518-d4ef3cd0df12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:f9:2b:97:a8:5e:1e:5d:62:95:4b:a8:16:
f2:db:3f:80:4d:59:89:ad:34:8d:fd:3e:3c:1b:d7:
4b:f9:0c:32:1f:e7:09:06:90:34:47:a5:e5:58:56:
b2:f0:d0:1f:0b:23:6e:01:8c:ff:3f:4a:b5:e7:5d:
48:0a:d0:f1:d2:f6:38:1d:9b:e3:24:59:4d:7b:fd:
4c:ec:5f:37:cb:45:c7:1b:f1:e9:ed:46:a5:8d:56:
c0:93:b7:a5:51:0f:3f:30:72:00:f7:95:fd:1a:7b:
dd:ee:57:3d:39:1d:a5:e7:9a:20:0a:be:7f:74:d5:
52:8c:6a:60:fc:fa:45:b7:0c:4c:a1:4b:7c:58:c5:
0c:17:31:82:e4:ad:f3:c7:d7:b1:cd:29:77:06:80:
d6:23:65:b0:0b:d7:49:3e:ec:42:4f:04:2f:83:36:
3d:36:eb:3f:f9:a3:2d:80:cc:f1:4d:24:ea:cc:b9:
77:b8:e9:3f:22:0a:09:76:fb:4a:8a:78:3e:56:7d:
aa:a2:f2:63:6d:7d:21:c8:e7:79:6e:87:d3:2e:cc:
05:17:fb:f2:7e:c3:db:5c:1b:9b:16:22:99:11:ab:
30:b3:59:47:86:fd:e6:2f:ed:53:4d:b5:38:80:b9:
77:39:ff:63:79:2d:87:f4:54:06:19:14:be:c7:78:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:DF:D5:86:7F:18:B4:80:26:6F:5A:CA:F8:CE:2B:8E:9D:3B:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/477df26a-f883-38e0-9179-7c7a5beac663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:807:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:24:bb:c3:64:2b:be:0c:de:93:21:97:22:e7:8b:1c:44:90:
1f:b2:58:f5:a0:05:d6:a4:07:ac:23:cf:ef:d8:97:5d:d4:08:
23:5e:39:50:ca:ff:67:13:4b:e9:23:35:f7:55:3f:3c:47:a7:
1c:81:30:95:18:0c:b7:f5:06:b0:32:ba:09:8f:9a:f2:85:78:
dd:16:a3:c2:0c:11:10:17:47:66:60:69:37:97:4d:c2:24:e1:
69:01:96:1c:95:be:c6:94:b3:ff:9f:e0:e9:88:47:b6:41:08:
73:92:87:e9:a9:92:c0:66:0b:c0:5c:de:a7:bb:d9:0e:13:f5:
38:8a:e6:06:f8:0e:8e:b3:26:ff:1b:58:05:2c:63:ea:2c:a3:
cd:5b:9d:ba:a2:d2:c9:6b:fc:98:87:35:b2:4a:89:9b:d7:a6:
90:41:27:3d:3e:1b:af:c2:ae:75:9d:18:4a:da:ac:cb:fe:1c:
8d:ef:94:77:9f:35:64:29:b6:27:2b:f9:1c:f4:cf:92:48:b1:
5d:33:4f:7f:9e:fd:e9:51:a1:49:34:9c:94:22:b3:47:16:0d:
ff:f6:6c:da:bd:3f:b9:f0:2b:08:f7:c3:16:94:8e:85:a7:11:
6d:c7:ee:d0:2c:f0:4f:dc:fa:38:f5:fe:0e:3f:58:aa:2f:65:
0c:e6:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:19 2025 by rpki-client