Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4b21fd8d-2d2e-3082-9496-019de0704239.roa
File: 4b21fd8d-2d2e-3082-9496-019de0704239.roa (raw, json)
Hash identifier: 3nD6lycS+RzEEsxjTjUGyi4OcR0/61X55tN2lvuJdoM=
Subject key identifier: 5F:4E:D6:4A:F4:5A:47:5C:6E:CC:05:6A:FB:A4:70:5A:81:42:31:3D
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F43285848696068B642066F19C366A000
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4b21fd8d-2d2e-3082-9496-019de0704239.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 393885
IP address blocks: 2604:4a00:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:68:b6:42:06:6f:19:c3:66:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=da432daf-cd3d-4f8b-b2d7-64c9c616e247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:14:92:f8:82:d7:e9:df:8c:25:a6:ec:44:cd:
1d:cb:53:90:a1:77:27:22:bb:fd:77:b1:79:19:cf:
fd:6c:2a:c5:50:91:31:6f:dc:7d:3d:a7:f2:84:54:
b5:90:d9:25:8a:0a:e0:67:c3:65:67:4b:84:b9:fb:
70:9e:d7:ee:72:92:80:3d:b0:12:3b:3d:33:4d:c0:
37:86:40:2e:6a:06:2e:d4:1e:d2:2b:af:9b:e1:ae:
64:f5:53:50:c2:08:9f:79:36:df:e2:bd:a9:db:36:
1a:be:ee:d1:8d:10:32:b9:64:4a:76:c1:cf:de:f0:
61:83:38:19:06:0a:de:bd:cf:48:79:79:26:09:64:
28:91:97:67:17:50:b0:6d:a0:fc:b4:b5:1f:10:39:
00:d1:93:06:b4:66:53:70:0e:50:95:35:f1:e8:b3:
a0:91:0e:b5:ab:06:2a:82:eb:f9:a5:0c:d6:b4:0f:
42:bc:78:e6:4a:75:7a:f2:dc:46:8f:a8:b8:91:59:
15:d2:03:c3:43:b8:d6:6c:01:ba:65:b7:36:7c:60:
06:dd:10:e8:26:e3:0e:6e:74:11:26:80:eb:07:73:
2a:1a:73:5c:1f:69:58:07:bc:88:73:9e:bf:b7:a1:
72:39:2d:53:7a:24:ac:bf:2e:ba:1f:8d:f4:db:cf:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:D6:4A:F4:5A:47:5C:6E:CC:05:6A:FB:A4:70:5A:81:42:31:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4b21fd8d-2d2e-3082-9496-019de0704239.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:7000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b1:26:97:ca:e2:ae:12:9c:e4:65:f4:30:be:73:83:24:7d:
68:44:58:65:91:8a:c0:69:74:aa:da:cc:bd:a9:a7:6b:64:db:
10:bb:a6:cc:59:e4:35:52:7f:33:29:b3:45:b2:75:e4:e1:8b:
36:04:40:29:1c:7d:4f:4d:ca:72:5b:07:ae:41:41:26:4c:99:
91:70:f3:42:9a:27:cc:cf:dc:72:74:3a:8f:2a:ea:0a:34:f5:
08:74:51:07:b3:a2:a8:2f:43:9c:a3:b7:3d:b1:24:5a:fb:6a:
81:6f:5f:38:21:89:0d:00:2b:87:a8:d7:9a:ba:4b:48:28:39:
52:5b:af:c2:94:e2:a2:1c:ec:f9:78:1c:1b:7e:4a:f8:7b:7e:
39:f1:91:89:44:08:d1:ce:27:e0:dc:5e:1f:90:38:ac:a2:03:
0d:23:44:1b:c3:fb:64:c5:c5:23:18:7c:9a:04:3a:2a:7a:d0:
3f:51:9d:f9:80:93:74:52:b4:49:e0:07:58:eb:46:26:fa:20:
f8:f5:54:24:2a:e2:31:68:bd:af:36:ee:17:d5:db:46:69:10:
da:55:95:96:6a:b2:7f:ab:84:ec:2e:2b:ca:36:5f:7c:aa:88:
a2:c8:2a:7e:d8:ba:26:4e:0d:da:f1:9e:23:2f:69:36:cf:bd:
5e:d4:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:24:45 2025 by rpki-client