Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a3490f3-1a1d-30e2-b1aa-4dd61703f4a9.roa
File: 2a3490f3-1a1d-30e2-b1aa-4dd61703f4a9.roa (raw, json)
Hash identifier: 8miIxQSqZOPkzXTgSral9RxI9wwYAqpoDrEQqjT3IHY=
Subject key identifier: 8C:A8:54:B2:A8:FC:15:A9:2E:C3:92:95:84:61:17:C4:28:BF:F6:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10CB7D1B08C58A593E8A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a3490f3-1a1d-30e2-b1aa-4dd61703f4a9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 2601:243:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:cb:7d:1b:08:c5:8a:59:3e:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=76a5b98f-04f7-4e70-ae80-ecf1efb1bcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:6c:b4:b0:94:2e:99:23:d1:7a:25:11:27:
a2:07:36:99:55:d0:c1:32:89:a8:c1:c2:fd:2e:25:
fb:5a:16:98:98:80:6d:3c:5a:95:46:98:c2:a5:91:
2d:45:b4:31:ba:8d:0d:38:bd:e5:58:df:72:f6:8e:
de:ce:79:ae:c6:27:2d:af:a4:8b:e7:9e:45:c8:55:
c8:33:a0:e5:57:95:0a:1d:48:90:58:b2:8c:2c:28:
e5:c2:d3:6d:c6:90:a8:70:1f:07:45:f2:3f:e4:21:
b9:d7:f7:17:6c:a6:4f:62:f0:e4:3d:89:a7:a1:7e:
09:73:bd:03:68:cc:88:87:57:e8:94:da:f1:64:c8:
c6:9b:23:85:1d:88:45:44:a3:77:70:6c:f6:c9:c8:
5a:da:ff:1f:60:37:2c:12:cf:62:49:bf:76:0c:3e:
94:58:27:95:7d:6f:bf:71:c9:9b:ee:96:b7:88:ef:
9b:0e:a9:6f:e0:29:34:2e:0f:18:3a:18:77:33:8d:
d4:b7:ef:70:08:c8:ba:bc:7a:f1:50:5e:36:7c:89:
25:41:1c:63:b3:58:42:d0:dd:9f:0d:eb:99:5e:7f:
2f:ed:7a:4c:f0:70:99:1b:ec:d7:2e:0c:e6:ab:5b:
11:3f:ad:5d:55:ed:3a:80:82:39:b8:8f:2b:be:3f:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:54:B2:A8:FC:15:A9:2E:C3:92:95:84:61:17:C4:28:BF:F6:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a3490f3-1a1d-30e2-b1aa-4dd61703f4a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:243:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:a1:66:f2:26:d2:0e:06:20:6d:08:b7:80:9e:9c:ae:0b:14:
14:97:4d:ec:8b:12:af:86:26:a1:13:f9:53:41:07:38:a6:b0:
46:50:3f:2a:7e:12:e6:23:8b:64:2a:93:cd:ed:06:c6:63:cd:
90:d3:75:f3:57:66:b4:9c:d9:ca:17:b0:38:84:2e:75:11:93:
5d:a9:40:93:e2:ed:58:8c:62:d8:6f:13:c2:4e:db:5d:7a:b3:
8c:78:5e:28:e9:2d:f6:d1:2a:88:c8:87:92:22:dd:e3:e5:7f:
31:dd:87:71:95:e6:d5:bd:5e:43:cf:61:57:4b:79:5b:64:7b:
12:23:77:5e:2c:b7:01:a9:29:4f:f0:6b:05:f0:61:d5:da:df:
14:4f:65:00:03:c0:1c:87:55:d7:c5:72:de:a8:d9:3f:3e:3b:
ef:a3:1e:a0:38:01:dd:93:ba:da:f6:15:cf:62:85:62:0b:28:
4a:e4:de:1d:d1:ab:70:cd:6d:66:d4:88:d1:c2:77:58:2a:be:
9d:15:22:45:09:7b:1f:10:e8:9c:c6:e2:35:7b:77:a6:c2:49:
f0:15:01:ab:06:c6:69:f0:3a:c7:26:bb:ad:46:b2:2a:ec:64:
c4:f8:cf:39:01:dd:eb:b1:7b:01:76:35:51:89:05:11:38:35:
69:dc:6d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:02:42 2025 by rpki-client