Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e64e4dc9-6839-3045-92ee-d31a426ee310.roa
File: e64e4dc9-6839-3045-92ee-d31a426ee310.roa (raw, json)
Hash identifier: NFpdgK5CyOne2VM/CUDzghF4TPeHBfZjQ1BxDGRH4HA=
Subject key identifier: FA:73:97:63:70:C5:18:BF:0B:B1:84:1C:A8:F6:8F:DE:FF:AB:EF:79
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BA8123429B72414BED680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e64e4dc9-6839-3045-92ee-d31a426ee310.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 2601:843::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:a8:12:34:29:b7:24:14:be:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=2a5583c5-3d92-442f-a6ff-20e0bbd0424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:b3:bc:93:f4:08:ab:c0:75:14:eb:0b:87:
72:2f:fd:9a:a4:0a:9e:bb:09:73:33:d6:8a:9c:21:
4f:b9:e4:82:41:24:d9:21:8f:24:69:2a:a6:97:eb:
8a:7f:04:1e:fb:28:5a:58:d6:63:f0:fa:19:a3:42:
7d:92:96:ae:ed:10:dd:37:15:8d:f1:a4:0c:52:14:
20:15:b8:52:1c:21:f4:03:f3:ed:fa:fd:8c:de:e6:
b7:13:1b:5b:f3:99:bb:c4:d5:37:ae:d4:7c:df:86:
39:97:cc:50:de:6f:00:11:1c:bc:00:5f:c1:72:77:
ae:cc:8f:12:d2:b6:fb:56:f2:c0:7b:ca:70:82:ac:
9f:9d:c1:27:fe:42:70:2e:c9:7e:19:04:6e:8a:42:
09:11:8a:6b:c6:a5:8b:26:2e:ec:de:4e:11:9d:76:
70:1f:4c:19:3f:59:53:16:e7:04:c7:76:51:7e:96:
d6:7e:41:fe:89:2a:5d:c3:15:f5:ac:81:ef:8b:54:
1c:87:51:4e:60:e3:07:20:8b:23:7f:7d:20:56:44:
e6:2b:54:b5:0c:e9:59:0d:be:13:08:42:46:9c:36:
5d:3b:5a:2d:1b:62:a0:61:d7:0d:a7:60:ed:35:f1:
da:67:27:1d:4c:fd:28:29:6e:f7:eb:f2:dc:78:d5:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:73:97:63:70:C5:18:BF:0B:B1:84:1C:A8:F6:8F:DE:FF:AB:EF:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e64e4dc9-6839-3045-92ee-d31a426ee310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:843::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:37:52:5d:79:57:48:1b:ac:17:7f:24:81:0f:c9:be:7a:f5:
c7:b1:b7:4f:de:a2:7e:d5:b3:2b:e9:e8:00:42:6e:35:56:5a:
3c:c7:f4:4e:8d:b1:17:1b:4c:c1:d6:01:36:f7:fe:2b:12:cb:
8f:1d:6c:30:a0:e5:91:c2:a2:dc:5c:2d:6b:33:b8:68:83:ec:
6b:e8:a2:67:e3:8e:2f:21:b8:f4:48:cf:00:05:0f:0a:68:da:
49:22:7e:ee:9a:ca:12:75:43:7b:83:dc:4d:ae:1d:27:b9:d4:
7a:94:fd:e7:51:34:da:d9:cf:66:e6:bf:4f:84:26:76:d3:c4:
69:32:7d:29:f4:09:4b:af:51:f1:bd:3d:b0:44:42:57:50:b8:
80:27:aa:2c:80:5e:e1:f8:19:dc:db:d7:ca:ea:17:80:35:43:
83:c3:50:13:31:40:c9:e1:56:d8:1e:fc:e2:e4:87:9a:66:8e:
4d:9f:ca:73:c3:5a:c7:2c:9e:25:b2:4c:9e:d4:78:12:57:b2:
2b:b8:a6:57:f6:80:fa:cd:13:cc:bc:c8:53:9b:8b:9c:16:cc:
64:03:63:28:db:27:59:ea:5b:92:f6:83:e9:90:a5:f2:c9:44:
da:9a:a0:f3:4c:21:c6:6f:73:92:c3:d1:ab:11:7e:87:47:d5:
ad:05:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:37:19 2025 by rpki-client