Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4438c0c8-d7ca-37e6-8fca-309155eb6f5c.roa
File: 4438c0c8-d7ca-37e6-8fca-309155eb6f5c.roa (raw, json)
Hash identifier: 4F4J0ikb7pebzJsVUcKJ0aNygE54Q0yqngZgM7gmHzc=
Subject key identifier: 7B:E8:9E:B3:8D:CA:6D:A5:4E:7D:1A:21:39:53:17:7A:63:80:0F:B6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F058477B7C8A531C42500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4438c0c8-d7ca-37e6-8fca-309155eb6f5c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 2601:406:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:05:84:77:b7:c8:a5:31:c4:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e5f355b9-823a-4527-a02c-1abac3fe3307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:2b:c9:6d:6e:60:10:10:72:b6:2e:02:df:
8e:88:c1:eb:6e:59:17:1b:71:ef:22:f9:14:70:b4:
7b:3a:49:4b:7f:48:ff:82:dc:b1:fd:c3:59:3a:92:
04:40:b9:c3:11:54:d6:49:79:dc:8d:98:4e:b4:cd:
22:c7:45:be:13:e6:6a:60:ba:aa:4b:d0:59:e6:5b:
6c:79:98:ff:35:f1:4a:a5:e3:31:1f:51:93:8d:5a:
1a:71:c7:c8:df:1c:cc:9a:a6:1a:41:d3:29:61:62:
b1:e8:b8:4a:ee:91:79:ee:cf:49:f6:4e:03:73:dc:
e4:d5:3b:d5:f8:ff:da:4d:26:1b:d1:fd:0e:b3:95:
3a:26:59:b7:b4:12:52:9c:a8:51:54:a1:c9:3a:69:
7c:6e:3c:13:e2:7e:e1:bf:f8:a6:27:f2:9f:ce:3d:
fb:0d:f0:1a:67:57:5b:a7:5f:a3:51:91:e1:e3:f7:
39:ca:21:bb:81:68:ba:f6:f3:19:89:dc:27:2f:98:
f8:01:06:eb:16:a3:05:c2:14:9b:f5:92:56:c6:0d:
51:2c:e4:1b:10:2c:b1:b2:93:3f:fa:37:76:2a:ae:
e2:df:fa:61:d1:29:e5:83:bc:72:25:bb:b2:97:56:
d0:f4:aa:78:15:1f:27:79:3f:b5:ee:07:f4:07:84:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:9E:B3:8D:CA:6D:A5:4E:7D:1A:21:39:53:17:7A:63:80:0F:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4438c0c8-d7ca-37e6-8fca-309155eb6f5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:406:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:7b:9b:0c:f6:16:55:87:97:44:51:98:f3:08:67:aa:7e:7c:
c3:53:65:19:44:8b:ec:6a:d9:00:c5:3f:fb:92:90:7a:da:7b:
f5:5b:95:2b:1f:ed:03:8e:17:0f:88:87:91:bc:2e:5d:1a:3f:
52:c8:a6:60:75:3d:0a:49:ad:a6:04:ca:ed:e6:ba:66:2e:20:
af:5b:cf:92:87:bd:aa:d0:9e:97:46:9a:7b:04:63:cb:88:28:
44:07:1d:6d:12:5e:02:e7:e9:8d:94:8e:5b:a0:30:0d:bc:81:
55:30:d0:b7:5a:3a:7c:b1:35:f2:f3:35:8e:23:0b:26:b4:79:
ac:75:e2:98:eb:ac:ff:55:18:8f:ab:8c:7e:be:82:65:52:3d:
11:bb:69:55:d1:19:57:b1:55:ac:43:5a:c4:b4:0c:ac:4f:c7:
6f:0b:67:ec:47:64:fa:42:37:81:a7:8b:1a:5a:39:8d:a4:fb:
0f:0c:68:5e:09:aa:63:4f:e5:12:6b:b2:66:18:de:41:dc:2f:
32:84:6e:23:8c:eb:0c:02:72:ae:a0:3f:85:ec:96:86:0f:9e:
ff:ae:40:b7:13:be:fd:a6:6a:63:95:82:08:24:48:ea:17:da:
af:83:b1:01:bd:34:a6:55:af:8b:67:1e:0b:29:85:7e:4b:36:
6e:68:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:14:22 2025 by rpki-client