Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa
File: d3baaff6-9184-3e90-aed6-78e8be196ba7.roa (raw, json)
Hash identifier: Xj2MYpSzPSCspBommkLYpL+DWjacghqP/4RfunOTmDw=
Subject key identifier: B7:9C:24:B5:1F:C5:92:74:3E:06:20:3B:CF:67:60:DE:1E:0C:C3:02
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858487A2071EDC900E17924961180
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 62651
IP address blocks: 2604:ea80:2400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:71:ed:c9:00:e1:79:24:96:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=01ceb5ac-49b0-4f86-a910-096bb5e8341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:8b:8b:ac:ec:a9:f4:8d:9f:25:38:b6:1f:
de:f6:50:07:0a:20:ed:29:fc:fd:98:16:ac:f4:e7:
70:d6:e4:1e:0c:d5:d1:b4:e6:40:ad:16:53:f3:a7:
af:5a:4a:e1:87:eb:3c:34:d9:b8:7b:c1:96:09:73:
31:8c:79:fe:bf:91:75:0a:86:b8:cf:2f:30:8e:62:
d9:5d:ad:e9:d4:e5:16:67:da:7d:79:f2:9e:48:d0:
76:8e:10:59:e9:60:c4:e6:d5:f0:60:c1:9b:26:21:
a0:60:b9:a2:a0:98:98:34:ef:ff:a6:d1:b5:34:f2:
0c:16:14:60:32:9c:19:b9:05:35:7c:ab:84:dc:34:
c3:cb:62:13:bd:29:e0:51:2d:df:7d:1d:1d:5e:17:
fe:4a:7f:89:a4:2c:e3:c2:b1:c5:b2:f4:c2:e7:81:
56:2f:6b:d6:ba:43:2c:06:66:80:8c:99:1f:15:50:
85:94:d6:d0:95:26:18:b4:72:05:31:8a:c4:f0:74:
7a:b7:69:68:ee:b8:96:97:9b:1c:9f:3c:7b:9a:e9:
4d:9c:6e:73:ce:3d:54:18:77:73:aa:cf:69:3a:9f:
75:4a:a2:11:3e:47:4e:1b:72:05:4c:1b:59:68:8b:
a2:aa:9f:ee:6c:48:e8:50:2f:29:93:8a:dc:cb:bb:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9C:24:B5:1F:C5:92:74:3E:06:20:3B:CF:67:60:DE:1E:0C:C3:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:ea80:2400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:30:68:03:12:47:7b:23:6d:6d:28:07:51:ac:34:de:d8:a5:
38:90:ee:81:88:bc:98:50:6e:7a:04:74:d1:6c:71:e5:8a:3a:
33:a2:97:71:a2:13:fb:ce:01:1b:27:65:21:b7:92:71:c3:61:
50:b2:6c:09:63:12:ec:97:90:16:4d:37:ea:70:47:51:c1:72:
21:f5:75:0a:ab:94:66:90:ef:50:d3:8e:39:78:71:af:d5:19:
ee:40:74:d1:95:1e:d9:4d:00:cc:30:7b:de:bb:dc:92:17:bb:
fc:bc:c1:7c:38:09:fe:f7:69:20:1c:d0:37:42:62:ea:02:dc:
ea:02:9b:2c:6a:32:32:0f:9e:3f:1e:71:85:ba:8a:c7:7d:a2:
f5:3e:2c:f1:d1:c6:d4:56:c8:c3:08:53:b3:1e:a8:e1:3e:84:
a9:52:6a:c8:32:aa:40:af:3f:52:87:43:dc:ac:49:7a:0c:8f:
a0:90:22:5b:d9:c0:46:0a:01:84:28:41:d2:46:06:71:c1:53:
76:e2:57:28:55:e8:b3:06:ba:06:e2:06:de:e8:3b:8e:6e:c5:
59:af:96:d7:df:0c:0e:ea:74:be:90:21:9c:10:e7:15:31:53:
ae:8d:f3:52:10:68:2f:55:77:3a:88:fa:f2:4a:c6:fb:3d:1c:
e2:0a:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:48:15 2025 by rpki-client