Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b7ee59-f748-307b-be5f-838c0b77100b.roa
File: d2b7ee59-f748-307b-be5f-838c0b77100b.roa (raw, json)
Hash identifier: cxI6fAx+sfaOQnBKQlhEY+nYcYRZrLl7uKBFiWspZFU=
Subject key identifier: E8:07:4B:AF:A8:43:5F:46:01:B9:3F:90:AD:58:F9:C7:B5:D4:E4:23
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10CEAE1312B22752E8E1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b7ee59-f748-307b-be5f-838c0b77100b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 2603:300a:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ce:ae:13:12:b2:27:52:e8:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=48e27757-f434-41df-9923-3ffe7e870073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:ae:9f:3d:b7:c6:0a:48:ac:63:4f:3f:3b:
cf:a8:c3:35:49:46:7c:4e:7a:43:96:4f:38:b2:3d:
da:c1:08:4a:e9:6e:1a:ab:6d:e9:c3:44:45:48:b2:
f8:ce:d3:be:24:ff:87:43:d5:1a:e8:ed:47:3e:ba:
88:fe:67:ae:16:38:b0:07:38:58:1a:2f:97:fe:97:
95:b2:a4:4d:11:3c:66:58:a9:a2:e3:32:b8:40:2f:
bd:9b:f1:37:7e:66:66:8c:8a:30:1b:51:40:8e:cc:
e9:c6:53:f4:29:a6:57:a8:96:a3:e7:c1:96:a2:42:
c7:71:4e:e4:d6:51:29:b6:7a:e9:a0:f8:d2:f9:c6:
49:ae:1c:34:10:0d:3a:fa:2c:94:b0:5a:58:9f:23:
35:40:94:c7:c5:8a:b8:33:b9:3b:1a:da:70:cd:ef:
67:83:12:35:3f:38:b6:ad:b1:a4:d9:a4:b6:38:0c:
f7:08:9a:b3:ab:a5:d1:44:c7:b3:89:6e:5f:b3:a8:
8c:67:3e:6e:cd:73:9b:e1:c8:27:5f:7e:38:05:23:
71:3e:63:02:26:a8:9e:65:7a:88:19:e2:6f:b0:56:
84:70:7c:79:4d:26:94:64:ed:0d:fa:80:df:9a:f9:
8e:38:ee:b4:32:f8:4e:ed:29:57:e1:db:6d:e7:09:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:07:4B:AF:A8:43:5F:46:01:B9:3F:90:AD:58:F9:C7:B5:D4:E4:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b7ee59-f748-307b-be5f-838c0b77100b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:300a:1000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:5c:8e:7e:ac:31:f8:e1:79:39:4e:9c:a9:44:94:d0:23:34:
6e:81:57:a9:c1:a7:64:f2:36:93:26:8b:14:58:e2:74:9e:ea:
8e:75:db:ba:f4:4f:13:22:12:c8:37:23:1d:dc:2d:03:f4:49:
6f:92:45:b8:78:35:8d:af:80:79:4e:4e:8d:28:d8:4d:33:25:
58:37:28:ed:1a:c0:a6:38:52:8e:8b:c0:37:3e:d1:50:bf:f7:
17:07:2c:b5:2a:ae:11:3c:86:82:77:b9:f7:bd:bb:af:5b:59:
8b:3c:2d:b0:a6:b1:32:8b:98:fb:90:f5:4e:aa:46:93:1b:bc:
9c:29:06:ae:20:d0:3d:bf:d2:7e:91:5f:b5:c4:10:14:89:59:
18:57:e3:8a:76:c4:8b:98:36:f4:7a:71:99:09:87:85:22:15:
a5:fa:f7:19:f6:ad:ac:79:37:34:3f:d0:ca:3d:8e:a9:9d:a1:
85:22:9a:7f:80:81:48:aa:3a:23:2d:cb:ca:31:b8:80:29:dd:
40:53:45:8a:09:13:90:90:b5:8e:6f:17:48:50:42:07:04:eb:
f7:77:63:b9:e7:a2:82:85:85:36:a9:5e:cd:a8:4e:4a:45:f6:
cc:de:4f:b7:6c:b4:20:36:3a:73:a0:55:00:9a:b0:a4:65:db:
78:cf:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:02:55 2025 by rpki-client