Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa
File: 706a369f-74a7-310b-b9f6-4d2f898435d9.roa (raw, json)
Hash identifier: 7otn4RnceiYVVbJ6+k9GNuDcZPZv0avP7/b8O3f0W9I=
Subject key identifier: 9B:2A:EC:C5:9E:F8:66:DC:36:44:FB:D0:18:9B:2D:62:EE:FD:80:A9
Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial: 010D0C9F4328584919418DBBE81A6E0103E5CC00
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 40160
IP address blocks: 2604:3000::/32 maxlen: 48
2604:d380::/32 maxlen: 48
2605:6d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8d:bb:e8:1a:6e:01:03:e5:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=95998c6f-8534-4183-a80c-4fe74303bc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:98:4f:b4:ef:f7:6f:50:08:d5:ed:a6:82:4f:
14:7b:92:72:be:14:af:01:e7:44:be:30:a1:79:6e:
21:ad:54:0c:06:52:28:32:b9:b5:b0:3d:b0:d5:a3:
ba:11:b1:15:f7:e8:a9:80:51:18:c0:e2:2e:b3:68:
d0:ee:a2:55:2d:42:d6:55:96:ee:c4:fa:f1:53:cb:
5f:0f:ab:6c:ee:3c:6d:6c:56:ae:3c:77:8f:f4:95:
9a:37:3f:1f:a7:a3:4d:18:7b:65:4f:f4:eb:62:4a:
c0:48:ad:5b:77:45:75:f9:51:4e:1c:31:fe:36:9f:
c9:b9:c2:4a:e3:08:d7:11:62:22:93:0f:61:25:6d:
90:2d:c3:ba:1e:89:74:a3:b6:47:5c:d6:9a:2a:83:
fb:d5:7f:e6:5a:b5:61:c2:b8:c9:46:9e:ae:03:bc:
a3:23:bf:68:b7:c2:fe:10:5b:d5:56:e9:8d:da:76:
31:f0:c7:8a:e0:f0:c6:7d:45:5f:5b:08:13:55:1f:
36:f1:72:e7:c4:8e:dd:32:95:2b:b2:61:6f:22:19:
c9:db:2c:14:1c:29:59:01:a8:c7:07:8f:27:85:b0:
28:83:0a:f4:75:a6:69:19:01:83:f4:df:a4:68:da:
78:08:02:1e:d0:f4:de:a3:ea:39:fb:10:c8:07:fa:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:EC:C5:9E:F8:66:DC:36:44:FB:D0:18:9B:2D:62:EE:FD:80:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
X509v3 Authority Key Identifier:
keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3000::/32
2604:d380::/32
2605:6d80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a4:c2:44:3f:b0:8a:f2:64:91:b7:d9:e6:7e:a4:3e:11:38:
e4:72:3a:e8:a7:70:7f:d2:8f:6c:bc:65:f9:e5:e1:e3:c8:ff:
bd:f1:cf:58:4b:c6:9d:c9:94:f2:f0:51:89:fc:5b:a2:f3:ca:
76:3b:1d:ba:ca:68:46:ea:8f:3a:f8:3e:5f:81:39:be:9d:cf:
c6:ca:60:13:5c:47:b8:45:09:c4:a0:da:d3:1c:d1:bc:bd:8b:
de:5e:09:4d:d3:4e:a3:28:7e:1d:c8:ca:b7:24:da:bf:e4:ab:
ed:bd:8f:3c:8a:97:5a:33:e1:6d:90:61:8f:2a:8b:76:c6:e8:
91:23:1a:fd:53:2f:41:f9:fa:cf:28:30:34:a2:c6:61:fe:7c:
9d:3e:fe:69:38:87:f2:34:75:25:c7:81:82:6c:b2:12:2a:12:
53:74:9a:a1:51:2e:44:1c:08:21:db:c3:aa:0b:21:b0:ae:3c:
f6:50:73:ec:94:08:88:af:40:17:a0:8d:6e:33:ba:9d:3c:b0:
85:fa:ef:b7:66:b8:b3:bd:09:c6:aa:fe:57:88:8a:81:ed:a3:
bc:e2:0d:f3:db:6f:7c:cb:20:c3:8b:96:72:5a:15:dd:35:21:
92:26:d6:f1:f4:75:c8:c1:31:f6:5a:7e:db:be:27:1a:b3:7c:
0b:3e:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:28 2025 by rpki-client