Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31ca073-c490-391e-b0ab-99522111bbb4.roa
File: b31ca073-c490-391e-b0ab-99522111bbb4.roa (raw, json)
Hash identifier: xYaM1R/O22uRqpqEpOAenBAtOKOBxNR23Z1msavT1KE=
Subject key identifier: 98:77:83:92:09:C8:F3:D1:EE:04:1C:98:35:17:16:DC:32:27:AF:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BAB57C8EF21645D955080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31ca073-c490-391e-b0ab-99522111bbb4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 2603:3011:1200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:ab:57:c8:ef:21:64:5d:95:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=a886a61a-c423-405b-a9a9-bb183d07a72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:8e:c7:a2:12:f5:35:60:84:aa:c1:09:f4:
13:07:61:a0:c9:7c:10:3f:21:9f:2e:ae:75:99:3c:
6d:16:17:9a:ed:14:ed:ec:05:f4:e0:8a:14:cb:97:
96:6a:c0:13:73:06:ee:79:b0:6f:b8:e9:06:df:99:
71:c6:f6:c0:fa:df:e7:16:a1:18:25:98:5b:c8:bc:
00:31:46:a0:8a:e1:a7:ad:8d:69:b4:cb:2b:12:78:
1e:09:c9:1f:b2:c0:62:c0:92:b2:ee:c2:3f:58:4f:
63:91:be:e7:de:be:f4:8e:9a:bc:b7:14:1d:36:3d:
be:51:09:32:64:2c:77:d1:a1:d0:de:37:07:79:b3:
aa:41:41:e9:5f:89:a0:af:de:68:d2:b9:24:64:04:
65:30:d3:b7:48:1b:44:5d:a0:b6:3d:e8:03:69:96:
53:36:6f:3d:1f:6b:db:35:21:27:dd:35:8d:23:f9:
1e:b0:da:f2:61:8c:f7:3d:e5:a4:91:71:02:90:29:
19:af:20:fd:ff:79:25:c7:66:5b:a3:d8:12:ad:48:
3a:2f:02:0c:56:41:3d:e7:06:71:a2:0b:62:ea:07:
43:3d:30:54:64:d7:47:2a:dc:cb:37:45:5b:7c:51:
fc:77:e4:72:df:00:21:4d:c2:70:1f:d2:b1:71:4b:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:77:83:92:09:C8:F3:D1:EE:04:1C:98:35:17:16:DC:32:27:AF:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31ca073-c490-391e-b0ab-99522111bbb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3011:1200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:1b:dd:48:35:66:b6:00:e2:11:e3:b0:53:b7:91:66:d9:5c:
a9:d3:d8:3f:20:8a:13:48:a0:c9:71:29:3a:39:48:11:72:5f:
02:cc:d3:6c:b0:37:fa:3c:31:13:53:e0:e2:fe:ae:be:26:81:
54:57:53:c1:5a:14:f5:d6:76:e4:05:b3:46:50:44:0c:ef:c3:
1f:3b:04:3e:8b:7a:d4:58:19:2e:60:07:ff:a5:cf:6c:ff:d4:
aa:13:26:6c:45:8a:cd:02:94:8d:cc:9a:9b:b1:ba:48:33:2c:
55:a5:7b:55:9f:16:75:dd:d8:63:86:08:1f:ac:c8:2a:10:a7:
51:5a:ab:89:89:28:49:7c:a4:0a:ef:41:b2:54:05:76:b7:d2:
a2:3e:20:52:23:bc:a1:6c:a2:e1:02:f4:a7:d7:3c:27:a1:09:
78:55:52:5a:b7:70:1d:fe:e4:a3:ab:ba:4d:4b:39:41:47:0a:
6c:3d:91:53:76:9e:dc:63:25:67:b7:d9:a1:32:26:37:00:ea:
ba:ce:e0:a7:56:3a:40:e8:64:f7:db:3b:e1:88:74:55:96:f2:
d8:13:80:81:8f:6c:97:cb:33:32:29:ab:b2:3f:53:d2:80:83:
50:6e:8f:0e:04:c7:2e:de:1f:86:f0:42:a6:f2:26:55:37:18:
db:da:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:33:27 2025 by rpki-client