Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc8147e8-2a2a-3a24-b7fb-fa54aaa2b53b.roa
File: bc8147e8-2a2a-3a24-b7fb-fa54aaa2b53b.roa (raw, json)
Hash identifier: KcvtVlaVYwMxIVcNBYtEeoNj65e+z7S4pXv10j7Zbp8=
Subject key identifier: F7:57:CF:C9:A8:C8:7E:A1:0E:CA:AC:D4:51:41:99:37:DA:8C:A0:E2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858481170094CE29F40D9AFA69800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc8147e8-2a2a-3a24-b7fb-fa54aaa2b53b.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7016
IP address blocks: 2603:2980::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:70:09:4c:e2:9f:40:d9:af:a6:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=e4f19ebf-30f7-4bdc-b162-025b6ebd4b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:29:3a:40:53:95:3e:ab:a8:d4:d0:d8:34:
51:ce:31:3a:d7:e6:66:91:e1:9e:0d:c1:85:b3:27:
d1:d0:fa:32:3b:9e:cf:76:90:c5:d1:95:16:f4:3f:
e6:54:67:8b:8f:fb:0c:2a:50:9c:2e:5b:17:4e:55:
e2:8c:32:64:36:b0:99:f9:3e:cc:d0:47:99:54:4f:
02:aa:0b:c6:0a:a0:7d:e6:92:a3:32:55:1e:f6:aa:
c2:5a:fb:16:2f:1f:c2:08:0c:dc:60:c8:88:bc:08:
37:1d:5c:a6:61:b7:9b:55:2f:79:ef:ad:89:6b:2a:
b9:67:57:f2:ea:cd:15:42:2a:62:57:38:5c:99:5b:
bd:5e:29:65:bb:91:4e:30:6f:10:29:45:10:41:0d:
53:ac:33:a6:07:09:b9:9d:1f:6a:1f:c0:8c:1a:cd:
e9:9f:c5:70:46:ff:5f:c4:c0:db:cb:39:19:c7:f6:
ce:7b:0b:38:71:ff:9d:5d:6f:87:5b:e5:79:f5:27:
e9:2c:77:fa:6b:59:ce:0a:6c:29:56:e9:78:c0:3d:
f4:c2:7e:4b:9a:fc:5d:68:35:12:04:44:66:0d:8e:
96:40:00:38:bd:ea:db:4f:83:4a:c9:38:fa:8b:5e:
46:55:32:08:16:77:e6:ed:f5:8b:73:b8:cc:99:51:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:CF:C9:A8:C8:7E:A1:0E:CA:AC:D4:51:41:99:37:DA:8C:A0:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc8147e8-2a2a-3a24-b7fb-fa54aaa2b53b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2980::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:5b:b3:7a:e7:1f:27:0a:9b:91:fe:9c:0d:79:97:c3:b2:1e:
a3:2d:7d:a7:e5:f8:c0:b4:ed:c3:af:18:69:6c:1f:d9:77:4f:
51:33:ed:9a:05:cf:bc:33:8e:53:e6:c2:c1:03:f9:19:7f:0c:
bd:43:b0:ce:5a:03:8f:ba:b3:cb:61:42:9a:43:68:92:8d:56:
f5:4c:df:f3:d8:6b:b1:32:f9:e6:e9:00:83:89:15:cc:de:25:
10:a5:b3:39:46:a7:bb:15:e0:ff:93:0f:06:f7:6c:e4:f6:09:
22:b9:4c:00:e0:0d:e5:3c:09:9f:cc:a2:dd:6b:4f:9c:78:90:
cb:05:35:01:3c:a0:25:5b:65:6b:fa:04:0b:2c:ad:48:16:7a:
aa:06:52:66:0e:27:8e:bc:96:ee:fa:e4:27:ab:82:4a:87:d6:
3f:1e:0c:cd:0b:fc:7a:0e:1f:ef:70:05:ac:0a:0c:aa:2a:de:
2e:1a:6d:5e:cd:fc:da:0e:4c:a7:22:5a:76:d8:1a:52:44:9f:
c7:dc:9a:4b:ff:c5:af:b2:16:3c:2c:98:0e:bc:08:1e:30:38:
3a:01:c6:5e:72:e8:a9:d5:3d:e8:aa:a0:fe:23:4c:eb:24:30:
71:93:21:6c:6c:aa:1a:ca:d1:09:39:64:07:d3:51:26:32:82:
84:4a:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:45 2025 by rpki-client