Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa
File: ffce5557-acd7-3635-8203-19ad10e6eb7c.roa (raw, json)
Hash identifier: Q4VCan6bfxdFFe+THyZoa2nj6mPh3yHKImroDDjMOII=
Subject key identifier: 57:B0:9B:87:01:D9:67:7B:F7:2C:81:D5:4A:B1:21:88:70:3C:C2:6B
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F43285848696068576254A61005F4A700
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 393885
IP address blocks: 2604:4a00:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:68:57:62:54:a6:10:05:f4:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=21a6d906-fcc3-4b14-b146-0989c64d520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:9d:b8:7d:62:40:ef:19:67:3f:78:db:9f:
d9:13:10:f0:d7:ec:c3:a1:5c:c9:18:9a:c4:83:4a:
e4:95:f5:ab:23:f7:32:9d:bd:e6:5f:1e:fa:58:90:
71:22:61:8f:da:81:ee:bc:f7:41:f6:cd:50:42:a3:
aa:e2:c8:39:eb:30:9b:7d:f5:5b:4d:57:18:bb:10:
cb:91:d2:c0:7e:1d:94:ee:df:9a:24:67:0e:2b:bf:
b0:85:74:8e:fe:89:f7:d6:4c:05:3b:2f:4e:26:6a:
44:c3:f4:02:84:44:3e:62:a0:95:aa:cd:b5:f1:be:
ca:e5:7e:53:03:be:91:73:23:33:0d:c8:43:26:d0:
b4:38:08:fc:86:0d:ec:83:72:07:75:d9:34:38:1d:
c2:25:8b:61:bd:4c:d2:2c:5f:35:e4:81:9d:32:57:
50:e8:8b:24:cf:f0:a1:98:8b:12:e2:cd:c1:b9:a9:
c5:30:1a:d7:b0:6c:f8:50:ab:d2:b6:a5:2b:6f:2a:
8d:c6:79:e6:a0:e4:60:57:74:9c:56:c5:09:e0:f7:
e3:6b:f2:f5:94:c7:2f:d0:a6:6c:f5:34:2c:fe:05:
aa:54:37:c8:80:bb:86:84:a3:01:e0:ba:49:ca:36:
3e:8d:79:87:71:07:c9:6d:b6:e1:08:b2:a8:87:19:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:9B:87:01:D9:67:7B:F7:2C:81:D5:4A:B1:21:88:70:3C:C2:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d8:48:87:b9:c9:de:10:8f:db:5a:a0:80:a1:d9:f3:bc:4a:
f3:32:aa:78:04:da:94:6f:80:96:3d:6b:fd:4f:32:19:0b:24:
53:1b:a4:04:4d:80:a3:ac:19:57:d2:22:4c:ea:ea:a0:39:05:
c5:86:06:b5:0d:5b:80:0b:aa:30:55:9e:ac:6a:d8:2b:f5:5d:
5b:6f:4a:2b:a0:7b:00:8c:b9:73:34:8e:3c:4d:09:38:0a:4d:
96:65:43:c7:35:53:d7:bd:5f:28:b4:b0:6e:27:1a:63:8b:8a:
37:11:48:01:64:7c:c8:71:03:d6:64:44:25:ac:d7:8a:88:24:
ab:06:9f:3c:8d:62:34:fc:fe:c8:ee:b8:13:ab:95:89:16:4a:
65:2e:73:33:b6:99:14:82:c9:be:66:d7:ec:65:7f:92:36:5a:
b0:f2:c6:e0:e4:91:99:5b:4b:16:c4:47:45:1b:22:69:68:b0:
ef:ad:a8:70:7a:3b:cb:c9:64:4b:ed:fe:d2:1e:37:e0:01:88:
ea:2a:52:a6:3b:6b:29:15:31:b4:fd:a4:47:5c:94:78:99:68:
78:69:63:27:9b:ff:50:8b:78:ba:cf:26:58:d1:62:b6:11:26:
ae:12:ac:0e:ec:05:74:c3:b6:de:20:dd:c8:70:7b:db:c6:c3:
1c:98:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:19:18 2025 by rpki-client