Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/ae4d2f42-df41-3a13-bf63-935e7905dc93.roa
File: ae4d2f42-df41-3a13-bf63-935e7905dc93.roa (raw, json)
Hash identifier: 8K1jegCF/QkJYTgmNagvtrF1DSH3nVdeXF0WnHLiNHo=
Subject key identifier: FA:4F:E9:EC:18:A1:BB:83:5B:11:E3:8E:33:C9:A7:D6:3A:6E:22:45
Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial: 010D0C9F43285848617C1F374C8637A50DF07460
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/ae4d2f42-df41-3a13-bf63-935e7905dc93.roa
Signing time: Mon 30 Dec 2024 18:10:23 +0000
ROA not before: Mon 30 Dec 2024 18:10:23 +0000
ROA not after: Sun 30 Mar 2025 17:10:23 +0000
asID: 81
IP address blocks: 2610:28::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:1f:37:4c:86:37:a5:0d:f0:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Validity
Not Before: Dec 30 18:10:23 2024 GMT
Not After : Mar 30 17:10:23 2025 GMT
Subject: CN=1e394515-bb13-47a9-98df-a8c79e99610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:4f:17:de:21:ac:5d:f1:09:9b:51:5f:22:
cc:7a:46:ce:6c:23:b7:b3:6b:05:98:d5:91:9e:1d:
6a:86:59:c2:89:7c:35:ce:22:8e:28:aa:1a:96:a9:
45:ab:a0:cc:9b:34:2b:bb:2b:13:13:5f:90:28:6a:
74:04:d5:2e:79:d5:2c:e3:94:8b:77:79:80:1a:24:
f4:d9:5a:d6:25:d8:07:fa:a3:1a:9f:e4:8e:90:f2:
02:e5:15:e3:da:04:07:96:86:3e:f4:c7:10:52:b4:
e9:51:51:20:1e:93:56:a7:1b:e8:79:95:47:7a:36:
8d:59:be:73:30:e7:03:f9:4c:ab:b5:ea:ea:c8:3a:
12:cc:ed:71:22:dc:2f:df:cb:9e:e0:6b:ce:96:59:
96:6b:c7:d8:53:d3:00:d1:2e:31:25:7b:4c:3f:21:
1d:df:e7:e2:43:df:87:5d:f0:02:58:2d:67:77:51:
74:0a:d7:23:23:9c:2f:b7:b5:a0:29:25:9b:af:29:
08:57:76:18:3e:9b:0b:ef:96:f5:4a:b1:c7:13:12:
a1:71:83:d4:5b:1a:48:e8:a3:7a:ab:8f:e3:a6:9d:
0a:ec:68:ac:c6:3c:03:5b:db:8b:00:ba:97:11:d3:
32:82:67:61:b0:c8:7a:00:94:27:a5:43:a6:d8:10:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:E9:EC:18:A1:BB:83:5B:11:E3:8E:33:C9:A7:D6:3A:6E:22:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/ae4d2f42-df41-3a13-bf63-935e7905dc93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
X509v3 Authority Key Identifier:
keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:28::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:a5:10:d1:85:3b:3f:89:44:03:fe:6a:40:76:a9:08:ca:d5:
27:90:92:bb:59:52:e8:51:64:05:1f:95:f6:94:b7:94:51:56:
79:91:06:fe:0d:a3:9a:f9:a0:97:76:72:a8:e7:d2:59:8d:51:
be:5b:b5:96:51:fe:65:a3:0b:32:97:01:8b:8f:03:c6:4d:7f:
07:e6:e4:c0:53:32:e2:54:6d:17:be:51:38:34:ca:75:06:b8:
44:e2:d1:c7:69:47:27:71:e7:f4:71:26:51:9f:87:9b:4b:e4:
95:5b:07:95:12:7d:ae:e9:9e:84:e9:41:4f:13:14:02:11:b9:
96:6c:f6:bf:f3:5e:ee:38:e0:fb:ff:07:be:a9:9f:63:76:23:
28:f6:3a:7a:f5:b8:d9:76:cd:89:47:dc:cc:3f:33:9e:54:bd:
89:a8:37:87:ae:4f:f9:bc:dd:3c:e5:3c:5f:7f:b1:43:5e:c2:
82:40:57:19:f6:1b:e2:3c:06:48:df:2c:a4:e9:28:a2:ff:46:
4f:12:64:9d:df:3b:39:16:b4:9c:ab:fc:39:cd:e3:64:16:ad:
20:89:1f:92:7f:0f:a3:d6:96:27:ae:01:9e:f6:bb:31:5b:83:
b3:dc:c2:99:d9:d9:34:6e:5b:c0:0c:b4:a7:30:e3:f7:12:6f:
9e:c2:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:23 2025 by rpki-client