Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa
File: 4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa (raw, json)
Hash identifier: +wXYgAZt9exAn43oRThpOS8giBjeUjigR0iTW8PiN+c=
Subject key identifier: 76:12:3B:73:0C:43:C9:4A:9B:C9:D1:55:87:79:B7:8B:EE:1B:7F:2B
Certificate issuer: /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial: 010D0C9F432858487CEB2F6BF4D580F5F9E3A4C0
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 10958
IP address blocks: 2606:7a80::/28 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2f:6b:f4:d5:80:f5:f9:e3:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=d51c8bbe-fe5f-493d-8e7c-5f0dbb8dbfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:cf:92:15:ed:e4:e1:94:97:f9:37:5d:2a:
57:46:82:e5:d1:4d:9e:a3:80:43:36:5d:36:fb:06:
13:7a:06:b8:2b:c5:e8:ba:f6:df:ac:8f:19:df:de:
35:ad:37:c8:df:48:7a:3d:14:dd:67:d4:b5:22:ac:
50:40:6f:51:dc:27:2a:bc:ce:71:2e:bc:69:55:96:
5e:9b:59:b9:1c:df:e1:21:83:74:d5:28:df:f9:cf:
bc:f6:90:8e:9d:74:a7:69:9d:72:2f:a0:35:02:cd:
9c:3c:a8:3d:bd:0d:1a:40:39:3f:5d:ec:56:fc:60:
a9:56:0c:3e:87:d3:15:8c:dc:7c:7f:f8:cb:37:f6:
7b:ea:1c:2c:34:b6:6c:4b:28:ec:ac:8f:51:46:9f:
a2:28:bf:15:e6:4a:6a:48:af:f1:3f:8e:cb:2c:2c:
06:3a:86:4a:72:49:05:dc:f4:f0:37:60:a4:ca:9e:
d8:b3:80:bd:fa:f1:4e:86:98:65:c7:1b:32:d8:75:
93:7d:12:ce:1f:66:27:9c:1f:6e:f4:d5:a2:14:10:
bf:1f:38:5d:7e:2b:89:91:84:12:5d:c3:e3:66:5d:
08:88:d4:2d:ea:18:b4:d6:28:73:c8:d7:46:e6:49:
41:4b:a1:11:fe:00:01:79:42:56:fc:01:3e:bd:77:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:12:3B:73:0C:43:C9:4A:9B:C9:D1:55:87:79:B7:8B:EE:1B:7F:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
X509v3 Authority Key Identifier:
keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7a80::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:ec:82:dd:8f:e0:ea:64:82:01:a7:00:1c:89:01:e1:82:7e:
e2:43:1d:05:40:9f:ec:c4:d7:2d:d3:85:36:52:bc:7f:a7:eb:
29:6a:af:8e:0a:e3:2e:4a:b1:d0:2f:a9:77:51:b4:bd:ce:f0:
4a:4e:9f:39:ab:a3:84:89:7d:1c:8b:3c:9d:84:46:fc:e8:7e:
0d:7f:9e:b1:dc:37:2a:91:6f:6e:c1:df:93:bf:04:ef:40:ec:
82:05:6a:c7:3b:08:19:b6:d7:10:2b:00:26:6a:a7:3c:53:fa:
99:b1:71:d3:07:af:94:95:d3:26:dd:da:33:b9:83:7e:cf:25:
62:9c:41:3d:7b:ad:7a:98:df:3b:d7:fa:5f:25:4e:70:dc:ec:
98:bb:a1:f9:a8:92:68:59:72:9f:2f:d0:b3:4d:07:e3:fa:40:
15:f8:b8:28:bc:1e:51:35:d2:44:21:05:f6:14:33:51:16:81:
d2:6d:c1:48:6a:f1:71:d6:51:74:b5:0f:b9:12:cc:c9:e7:c1:
15:5a:3c:41:25:92:7f:5a:f6:89:87:7f:bc:9b:c3:a0:d4:f9:
79:fe:24:58:50:f5:29:2c:cb:07:8f:66:5c:f2:b4:49:d4:5b:
6d:d0:8f:73:34:16:aa:86:6b:c4:62:64:2f:f9:4b:64:17:02:
e4:bc:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:12 2025 by rpki-client