Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c3492fb-6449-3e99-9792-61856cfafbfd.roa
File: 2c3492fb-6449-3e99-9792-61856cfafbfd.roa (raw, json)
Hash identifier: Y0DcYzTFJbIsmRk4n+xja2agx/7vkmt1Iy915Too5q8=
Subject key identifier: 89:CD:04:BE:B6:FD:9B:18:C6:22:C8:B0:A3:97:22:FD:09:7C:0F:E8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F08FE04918FF6A4ED10E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c3492fb-6449-3e99-9792-61856cfafbfd.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 2603:2408:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:08:fe:04:91:8f:f6:a4:ed:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0196d0d9-95f7-4445-8092-1f4af3b40dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:ab:c8:d3:6c:eb:a8:23:7f:f9:8e:6d:e2:
20:29:09:47:92:fe:f4:77:03:0b:cf:2b:07:18:6b:
62:ee:89:c0:a8:ef:ce:c0:be:f8:98:99:6f:20:91:
19:5b:f4:53:e3:b0:c0:dc:ac:ae:8e:84:b1:c2:a0:
23:db:0a:f3:42:a0:de:49:60:8a:b7:98:d2:8c:83:
54:17:c5:81:5c:c8:7c:11:fe:4a:5d:ad:e2:74:40:
9b:47:9a:45:58:9e:45:92:ca:0f:20:56:a9:0c:36:
89:6e:8c:52:36:dd:0c:cd:ed:2b:ed:bd:80:af:6e:
33:c0:29:94:90:9a:5f:98:b6:d5:36:ab:65:e9:33:
60:42:f9:fc:c9:55:19:be:64:11:b8:20:c2:10:56:
7e:12:93:fd:f7:88:6a:5d:9c:60:37:7c:c2:28:5a:
9e:84:20:53:c3:16:42:c4:6e:31:ab:43:e6:a9:6f:
e3:5b:92:6e:18:69:25:3a:8d:dc:cc:f7:9b:7d:6c:
d6:96:33:74:2f:25:f0:62:48:98:81:8c:89:a0:c7:
f3:ed:5b:67:0e:61:a6:55:49:17:e9:9c:50:24:f7:
da:c4:9f:0b:0e:35:1d:48:7a:3e:e2:a8:e5:88:6e:
6c:17:ff:d5:9b:dd:61:09:1d:8c:cd:bb:71:24:74:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CD:04:BE:B6:FD:9B:18:C6:22:C8:B0:A3:97:22:FD:09:7C:0F:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c3492fb-6449-3e99-9792-61856cfafbfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2408:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:6c:c5:b0:81:52:14:b0:1d:15:a6:a8:78:bf:1c:6c:66:81:
0c:40:73:06:7c:29:74:d9:ad:42:9b:0a:c0:3c:8c:41:66:58:
36:7b:d6:2f:44:e3:3c:32:5e:21:e6:b5:95:e6:8a:61:a4:35:
01:4b:1b:91:5d:bb:e5:07:37:24:3b:02:48:08:ba:7e:d7:dd:
c1:ab:9a:58:4f:96:c8:6f:9e:b0:60:81:6f:1c:dc:62:a8:a3:
97:8a:bc:3b:62:cd:ba:78:ca:76:37:4e:04:4c:71:e3:52:c1:
99:d3:9b:b2:6c:69:b8:50:af:97:c8:b1:fa:09:27:47:dd:49:
8b:c2:e7:d2:b8:a7:43:99:86:ec:e0:24:10:b9:c5:88:a7:79:
f3:06:41:71:5b:a2:b7:a6:c7:5b:52:a4:c1:e1:c6:24:fb:00:
ba:25:51:df:0d:fc:fd:d3:e3:e7:43:a8:3e:4b:82:ca:c1:9a:
4b:e3:17:13:77:b2:7b:1a:06:ac:9c:29:f8:a1:56:77:b0:74:
b6:ec:06:13:6e:61:6c:cd:0d:63:c3:ce:88:f7:d1:13:96:48:
b5:61:6c:6c:41:fd:26:70:a2:7e:68:44:16:cf:db:68:65:cd:
1d:7d:26:1f:d2:df:cd:aa:aa:5d:27:f1:4a:ec:a3:4b:da:58:
3d:3c:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:20 2025 by rpki-client