Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4ee05a-1d6c-3f70-8871-634919a80387.roa
File: 7e4ee05a-1d6c-3f70-8871-634919a80387.roa (raw, json)
Hash identifier: ymT4ZAp+70qYsUWvogDeU5VpDlGmVcpj7ZdxvgkR44c=
Subject key identifier: 9B:CA:79:43:0A:12:4E:54:1F:65:7F:02:17:C5:E9:A7:6A:AE:55:59
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF285DB00F12D77B890A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4ee05a-1d6c-3f70-8871-634919a80387.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 2603:301d:2300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:28:5d:b0:0f:12:d7:7b:89:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=2c6b7c71-3ec0-48e4-81f6-224b462c8482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:7f:4d:31:d9:be:dd:9f:cb:8d:93:d0:78:
e9:57:9e:c9:0a:07:33:38:34:ea:1d:05:94:23:e1:
5c:10:a3:9d:5f:a2:44:8d:d5:27:ae:8c:99:37:16:
9f:86:f8:20:8a:b7:4a:3b:06:47:a9:d3:ea:0f:2d:
d7:58:43:39:6d:07:02:1f:53:82:2b:63:88:80:0a:
06:ed:26:25:6f:df:48:aa:8c:94:92:98:ee:a7:b0:
14:cf:24:4a:23:f6:be:24:ab:5a:38:2c:6e:4a:cf:
1e:6b:15:1b:7e:1b:7d:6c:99:45:6b:f2:49:1b:d1:
3b:0b:b3:59:7a:9c:7f:17:24:bf:d9:74:c9:07:13:
7e:77:5f:db:78:97:76:ee:bf:ec:67:de:2e:d8:80:
aa:ee:7d:cc:d9:e5:9a:2f:fb:7f:df:63:4f:99:c9:
7d:ae:05:9a:3d:6b:90:00:ea:43:be:85:dc:39:2b:
52:fd:15:3a:65:63:6b:10:db:df:05:ac:94:a2:83:
25:6a:c1:25:1a:9f:14:b0:73:97:32:6a:54:9a:8f:
a1:50:28:c3:3f:39:fa:14:ab:7d:4b:3c:91:6d:2b:
65:e0:7e:ba:39:e2:d6:dc:3f:69:55:1d:b0:72:50:
f9:35:af:10:e6:e0:c0:be:4a:28:ee:01:bb:32:05:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:79:43:0A:12:4E:54:1F:65:7F:02:17:C5:E9:A7:6A:AE:55:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4ee05a-1d6c-3f70-8871-634919a80387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301d:2300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:09:2c:46:00:9d:82:85:92:ff:44:70:ab:32:a5:af:ce:6e:
c2:6c:e2:14:8a:65:8f:41:f7:40:87:88:5d:bf:f4:9b:8c:5e:
99:ae:20:3f:e7:46:48:cd:69:d5:06:68:79:dc:1c:ce:e2:bd:
26:2c:ad:f3:ed:1e:19:56:5c:80:6a:8e:35:6c:15:23:b1:72:
78:72:7a:85:73:60:06:7d:7d:c0:bf:a8:31:56:80:2e:69:1c:
df:99:8d:5d:2c:cc:51:8f:39:af:d7:07:34:75:39:20:9b:76:
9c:7a:72:68:be:68:d3:d3:cd:c1:66:76:a3:e5:5e:08:60:59:
a8:3d:a0:a3:e7:cc:fc:f6:48:1e:a4:20:d1:c2:b4:94:ae:08:
35:ff:fe:39:d6:9e:18:fa:cb:c9:b6:15:38:b3:3d:55:dd:4e:
1a:35:26:39:83:0f:43:f7:72:dd:1c:2b:cc:9e:22:63:90:fe:
47:2d:59:fe:f4:38:a2:68:9f:c0:83:38:6a:4b:21:1c:2e:1e:
e7:af:6c:05:64:c0:16:7f:c4:79:d5:95:54:4f:21:80:84:bb:
11:64:91:0f:14:ec:83:6b:2e:09:57:0a:da:17:9d:56:86:7b:
f1:f1:94:f2:ab:b0:c7:10:f5:b0:d1:ef:23:a3:9f:b4:2c:a5:
2e:07:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:19 2025 by rpki-client