Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa
File: 2909e0dc-bd8d-38dc-bae9-335626f3845e.roa (raw, json)
Hash identifier: zsAXDwM5hRHp6jeeFVqtzRx8vt8y2q1iSDdJI7NQL10=
Subject key identifier: 67:E7:CE:16:51:D8:7F:B1:1A:65:9D:B9:C3:EE:48:0C:94:44:97:86
Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial: 010D0C9F43285848BA562FEAB614CA8B4E0EDF80
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 36007
IP address blocks: 2604:bc0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:2f:ea:b6:14:ca:8b:4e:0e:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=94f3e230-b638-4391-8f02-fa8aff67c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:55:46:95:fc:c1:89:f0:71:13:8c:17:e5:
94:88:73:36:0e:61:a9:ed:30:11:1a:b9:99:7f:e7:
b8:60:e1:c8:c2:f2:6c:36:a0:94:59:82:45:09:71:
15:df:f2:05:38:62:5c:e7:26:fb:61:2e:3f:0b:92:
91:a4:0e:f7:78:c0:ef:13:d3:5a:5a:2e:5f:d5:69:
ef:f6:88:7e:e5:66:d9:bc:7b:32:2a:ab:cb:be:bf:
b4:7e:ab:8e:dc:c9:a9:64:42:fe:e2:2d:89:e4:3c:
ff:40:62:0c:ad:ac:44:55:4f:20:27:63:0e:c3:b1:
1e:76:fe:4c:a6:af:d6:4c:22:36:d7:e6:8e:64:55:
ff:d5:8e:9a:ae:1c:6c:45:65:60:9e:31:72:b5:9c:
64:04:08:dd:9e:1d:da:b5:4b:84:dd:ff:50:2d:86:
cc:11:e8:ba:21:26:6a:bb:d4:ab:4f:4d:03:fa:81:
50:c3:d1:38:04:32:ae:e9:a0:f4:1e:3a:90:35:57:
ee:9f:7f:15:e1:59:52:68:4f:17:48:cc:62:94:d9:
d7:a9:28:cd:08:7e:15:61:c9:10:fe:9a:36:e5:8b:
b2:31:ba:aa:c9:1d:35:54:e6:9e:e1:9e:fd:26:fc:
33:08:37:99:31:04:0b:e0:2b:57:1b:27:cc:c5:2d:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:CE:16:51:D8:7F:B1:1A:65:9D:B9:C3:EE:48:0C:94:44:97:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
X509v3 Authority Key Identifier:
keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:bc0:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:67:62:40:90:a7:0e:ea:79:3b:fc:bf:d6:cb:9a:40:5a:6d:
b9:43:a6:f8:65:d2:07:cd:35:d0:70:e8:a5:9e:27:c3:c6:85:
c0:73:62:a4:15:7e:fe:17:e9:36:8c:72:d4:cc:d6:f0:30:06:
54:26:c5:51:1d:d8:22:8e:df:d6:3a:4d:82:d7:b9:43:44:fb:
c7:78:e2:69:f6:96:be:a9:c5:85:a8:a5:4f:63:4d:50:5f:97:
46:69:dc:c0:b8:f5:93:06:d5:65:65:59:02:17:85:c2:a1:a6:
82:bb:e1:ac:8c:a8:58:46:83:92:cb:4d:b0:49:ea:46:65:d0:
c5:3c:ef:08:15:2f:34:eb:25:23:a1:0c:30:60:47:a0:9a:c9:
06:72:9c:d1:0a:d9:54:7d:8b:8b:b6:b7:07:03:ad:65:37:a9:
4f:b6:1d:da:d0:d7:ca:d1:71:6f:67:d1:c2:1f:7c:da:f4:2c:
fb:ab:f4:dc:12:52:21:0d:7a:5d:75:96:c4:bc:45:42:34:b0:
1c:07:f8:21:b9:29:20:7d:1f:81:9a:f4:3c:29:06:97:53:d1:
2b:1a:4b:73:e9:a7:aa:ea:cd:a8:73:ea:34:39:0a:68:25:a4:
2c:2f:50:d0:bc:a9:1d:65:4f:a1:e5:0a:19:bb:44:f1:73:0d:
6e:80:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:46:37 2025 by rpki-client