Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41f883ac-a086-3728-bd89-dd3ca3a22ccb.roa
File: 41f883ac-a086-3728-bd89-dd3ca3a22ccb.roa (raw, json)
Hash identifier: UPilC22ApsfmcR8tI0G/eX3tRju0i2Evo+XuLnpXMmI=
Subject key identifier: 5C:3A:E7:C3:51:32:5F:42:A3:A2:2F:9D:F1:DB:EB:05:73:79:91:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A8E1028C410BAD6C4F340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41f883ac-a086-3728-bd89-dd3ca3a22ccb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 2603:3004:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:8e:10:28:c4:10:ba:d6:c4:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=cfb391b1-2de1-4118-b3ac-fa0e831010e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:d6:93:73:8f:c6:7c:6a:20:49:9d:b7:39:
3d:5a:e2:5d:ca:e9:17:cb:87:5e:a9:5f:17:a6:c0:
32:c4:f2:71:be:9d:2e:10:fc:93:e0:22:69:fc:37:
12:37:7c:d3:f9:36:d1:1e:76:b2:f1:f6:4b:e4:9b:
e7:2e:50:60:45:65:c7:ae:64:85:7e:24:49:2e:70:
89:3d:3e:97:a2:0d:36:90:49:3f:c0:72:04:48:8b:
39:1f:1e:5e:0a:9c:de:99:1c:f0:72:2f:4a:df:43:
f1:ff:6a:dc:aa:27:c0:dd:22:b2:00:0d:5d:92:52:
43:86:8b:31:77:d8:4c:ab:59:f4:7a:e6:1b:e7:95:
40:ee:5b:07:25:d9:bc:65:7f:c0:14:0a:ec:93:87:
fc:3f:6d:97:9f:16:49:26:ae:b6:f6:6d:ac:9e:bb:
00:25:66:35:2e:4b:2f:33:b9:aa:ad:c6:67:a2:3a:
3c:e1:cf:76:0a:6e:fb:64:14:98:88:15:33:02:47:
94:ac:55:75:7c:36:ce:dc:fe:e3:f6:82:ff:f2:9b:
37:cf:66:3e:f3:8e:14:2a:23:99:3a:e8:cd:20:ad:
be:56:d4:c4:42:ed:b8:83:58:d9:82:52:4a:ea:75:
04:ed:9d:0b:e4:62:e7:53:89:26:49:b5:7d:e5:6d:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3A:E7:C3:51:32:5F:42:A3:A2:2F:9D:F1:DB:EB:05:73:79:91:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41f883ac-a086-3728-bd89-dd3ca3a22ccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3004:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:0b:8b:fd:3a:5d:cd:2d:5a:ab:69:62:a4:33:52:95:8a:67:
e5:10:c2:7e:48:27:ea:48:00:68:e4:07:cd:2b:6f:ec:ee:44:
2d:5d:32:12:13:68:5d:f3:ae:e8:c4:fc:28:7f:6a:c0:98:86:
14:12:99:d4:e1:d5:4e:67:86:ee:02:f3:25:5a:aa:9b:a9:9e:
96:51:41:39:9c:51:c7:5f:cc:ed:8f:60:ef:ae:4e:31:41:d7:
32:81:1b:3b:1c:06:39:a8:b1:ca:c2:df:80:c1:0e:14:5b:3c:
82:9f:37:80:64:1c:23:d3:72:0b:9b:83:1a:d5:a3:3b:ea:c4:
04:88:f9:7e:be:cd:40:11:3f:71:43:84:7f:ba:6d:ff:40:7d:
f4:d5:9a:7c:73:a7:3e:20:4c:b8:89:fb:04:41:53:4b:ee:60:
59:28:2a:d7:68:ba:85:95:a8:cc:c5:06:2b:f2:9e:c4:a6:c3:
d7:90:9c:48:4d:3d:92:d3:86:f9:25:de:ae:60:4c:5d:4c:7d:
65:22:7b:f0:a6:75:b2:b0:46:a3:d7:1c:f1:60:75:90:4d:3a:
63:c8:33:91:77:94:47:11:41:5a:f6:93:81:63:06:35:de:27:
25:a2:a5:b2:e6:66:40:d8:47:22:31:e6:8e:81:03:1b:c7:90:
b4:b6:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:34 2025 by rpki-client