Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa
File: 410b7467-8dc1-343d-be62-6eca5954139a.roa (raw, json)
Hash identifier: YgrUB/JZP5/dv56zcXiDv/w/l4SqAlJ6aAxmoMqUsEE=
Subject key identifier: 4B:6B:80:46:5F:D6:C0:7E:62:CF:69:CF:D2:FD:97:4E:FD:2B:1E:56
Certificate issuer: /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
Certificate serial: 010D0C9F432858494B641B3647FF80E8172FE480
Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 399494
IP address blocks: 2604:3b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1b:36:47:ff:80:e8:17:2f:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=d990b2bf-40c2-460f-bf03-6aa2dd6321b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4d:45:cd:a7:0a:1d:85:a3:81:c6:c4:74:c0:
23:e5:5e:d2:cf:00:29:7b:5b:4e:19:5b:1b:cd:51:
c0:91:d1:08:0d:40:7d:4f:06:27:e5:23:63:a3:fb:
86:a6:2a:8f:b7:91:92:ba:3a:06:dd:6f:aa:06:60:
c9:fa:fd:d4:89:fb:95:9b:e5:d3:ed:91:59:37:63:
24:65:9c:a6:62:5f:b1:4a:7e:02:70:b2:7a:aa:1e:
ca:6e:bf:f3:11:96:5e:52:60:08:06:31:2b:99:5d:
19:25:a4:1f:1d:0e:51:9a:9a:75:a9:9b:a3:d8:67:
23:f1:06:c0:cf:ae:5d:38:c9:ea:23:dd:d0:0b:90:
1e:50:2e:b9:59:a0:fd:87:21:ec:16:61:14:ba:0c:
b2:20:e7:d8:f1:31:02:2d:e9:67:42:1e:62:b6:ce:
c1:49:dc:9f:c8:0a:0a:38:03:68:f1:78:37:f2:9c:
dd:e0:a4:3b:62:37:52:7b:eb:fe:9e:d6:56:7f:fb:
5d:ef:00:c0:65:ff:c2:a2:b2:bf:5a:8d:2f:eb:0f:
c5:c2:dc:0f:82:9f:35:49:98:d6:cf:09:9f:f8:fd:
a3:4a:f9:9a:10:c4:da:c7:f1:d1:ea:68:c6:3f:e8:
b9:16:37:0e:14:79:de:1f:1f:8e:09:1e:92:e6:69:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6B:80:46:5F:D6:C0:7E:62:CF:69:CF:D2:FD:97:4E:FD:2B:1E:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl
X509v3 Authority Key Identifier:
keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3b40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:f6:0c:33:04:1c:f5:fd:f5:71:4d:76:a7:40:76:da:c9:1e:
f3:8c:32:6d:72:bd:c3:ce:bb:dc:9a:2c:12:68:10:54:a4:01:
4c:63:14:d0:30:9b:bc:b6:ba:f0:b8:04:85:eb:2d:0a:52:2b:
3d:24:24:fc:b1:c9:3f:de:6c:c3:3c:67:41:58:b4:1c:eb:d1:
32:ba:bd:7f:eb:8a:72:11:d6:ea:82:ac:7b:db:65:66:bb:eb:
67:68:ca:d2:70:9d:33:b8:27:83:1a:28:5d:ba:05:6d:c6:94:
9b:47:32:e2:54:13:0e:f9:a1:37:86:c8:9c:e9:45:ba:56:74:
93:bd:0d:48:53:d8:54:2a:41:56:03:ab:65:85:56:c0:a7:c4:
55:4d:f6:f7:d9:88:e6:b7:f2:79:fd:e3:77:43:84:62:49:43:
5d:68:99:4c:37:b3:45:13:6f:47:5f:a3:8b:01:f8:f5:d5:b0:
c4:5b:8a:92:d3:37:ab:ce:0d:93:c8:ac:bb:60:a3:8b:91:ea:
ea:6a:74:42:f7:f4:33:c7:91:1f:c8:cc:dc:a2:9f:5b:36:3e:
39:6f:82:17:10:1b:08:97:53:5a:0f:53:1d:79:44:31:52:48:
92:6a:8f:75:4c:bb:01:57:bc:63:2b:f6:b3:a5:53:58:93:ea:
4e:be:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:38 2025 by rpki-client on console.sobornost.net